CVE-2016-9018: Null Pointer Dereference
Published Oct 28, 2016
·Updated
Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a crafted .QCP media file.
Affected Software
1 affected component
RealNetworks RealPlayer=18.1.5.705
Event History
Oct 28, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-9018?
CVE-2016-9018 is classified as a high-severity vulnerability due to the potential for a crash caused by a Null pointer dereference in RealPlayer.
2
How do I fix CVE-2016-9018?
To fix CVE-2016-9018, users should update RealPlayer to the latest version that addresses this vulnerability.
3
Which versions are affected by CVE-2016-9018?
CVE-2016-9018 specifically affects RealPlayer version 18.1.5.705.
4
What type of attack does CVE-2016-9018 allow?
CVE-2016-9018 allows attackers to exploit a crafted .QCP media file, leading to a crash of the application.
5
Is CVE-2016-9018 exploitable remotely?
Yes, CVE-2016-9018 can be potentially exploited remotely through specially crafted media files.