CVE-2012-4987: Buffer Overflow
Published Nov 4, 2012
·Updated
Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP file that triggers incorrect processing of long pathnames by the Watch Folders feature.
Affected Software
1 affected component
RealNetworks RealPlayer=15.0.5.109
Event History
Nov 4, 2012
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4987?
CVE-2012-4987 is classified as critical due to its potential for remote code execution.
2
How do I fix CVE-2012-4987?
To fix CVE-2012-4987, update RealPlayer to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2012-4987?
CVE-2012-4987 affects users of RealNetworks RealPlayer version 15.0.5.109.
4
What does CVE-2012-4987 exploit?
CVE-2012-4987 exploits a stack-based buffer overflow through crafted ZIP files that affect the Watch Folders feature.
5
What are the potential consequences of CVE-2012-4987?
The potential consequences of CVE-2012-4987 include arbitrary code execution and system compromise if exploited.