NGSSoftware Insight Security Research Advisory #NISR17042004 – By crafting malformed .R3T file it is possible to cause a stack based overruns in RealPlayer / RealOne Player. By forcing a browser to a website containing such a file, code could be executed on the target machine running in the context of the logged on user, alternatively the end user would be required to open the .R3T file as a mail attachment. Systems Affected: RealPlayer 8, RealOne Player, RealOne Player v2 for Windows only (all languages), RealPlayer 10 Beta (English only) and RealPlayer Enterprise (all versions, stand-alone and as configured by the RealPlayer Enterprise Manager).
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33029/realr3t.txt
Source: https://packetstormsecurity.com/files/33029/realr3t.txt.html