RealPlayer Multiple Vulnerabilities

Multiple vulnerabilities have been identified in RealPlayer, which can be exploited by malicious people to compromise a user's system.

1. A use-after-free error exists in pngu3267.dll within the handling of displayed dialog boxes when navigating away from a web page. This can be exploited to dereference already freed memory by tricking a user into visiting a specially crafted web page and e.g. display the "Copyrights" or "Version Info" dialog box via the "About RealPlayer" context menu or open the "About This Presentation" dialog box, which can allow execution of arbitrary code.
2. An unspecified error related to SIPR, and a boundary error within the handling of certain ID3v2 tags in MP3 files and qcpfformat.dll when handling certain QCP media files can be exploited to cause a heap-based buffer overflow.
3. The application allows the processing of local HTML files with scripting enabled, which can be exploited to execute arbitrary code by e.g. tricking a user into visiting a malicious website.
4. An error within the handling of "DEFINEFONT" fields when parsing Flash files can be exploited to cause a memory corruption.
5. An error within the parsing of AAC raw_data_frame elements can be exploited to cause a buffer overflow.
6. An unspecified "Out of Bounds" error, and use-after-free error related to "Embedded AutoUpdate" and "Embedded Modal Dialog" exists within the RealPlayer ActiveX control, which can be exploited to execute arbitrary code.