iDEFENSE Security Advisory 06.23.05-5 – Remote exploitation of a heap-based buffer overflow vulnerability in the RealText file format parser within various versions of RealNetworks Inc.’s RealPlayer could allow attackers to execute arbitrary code. The vulnerability specifically exists because of a string copying operating into a fixed size heap buffer using the sprintf function. iDEFENSE Labs has confirmed that RealNetworks’ RealPlayer 10.5 6.0.12.1056 on Windows and RealPlayer 10 and 10.0.1.436 on Linux are vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38271/06.23.05-5.txt
Source: https://packetstormsecurity.com/files/38271/iDEFENSE-Security-Advisory-2005-06-23.5.html