CVE-2011-2950
RealPlayer 11.0-11.1 and 14.0.0-14.0.5 and RealPlayer SP 1.0-1.1.5 - Remote Code Execution via Crafted QCP File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-2950.
PoCs published by Metasploit, Sean de Regge, juan vazquez, including Metasploit module exploits/windows/browser/realplayer_qcp.
AI-analyzed exploit summary This Metasploit module exploits a heap overflow in RealNetworks RealPlayer when parsing a maliciously crafted QCP file. It leverages a static buffer overflow in qcpfformat.dll to achieve remote code execution via a specially crafted 'fmt' chunk.
Description
Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a crafted QCP file.
Exploits (2)
This Metasploit module exploits a heap overflow in RealNetworks RealPlayer when parsing a maliciously crafted QCP file. It leverages a static buffer overflow in qcpfformat.dll to achieve remote code execution via a specially crafted 'fmt' chunk.
This Metasploit module exploits a heap overflow in RealNetworks RealPlayer when parsing a maliciously crafted .QCP file. The exploit leverages a static 256-byte buffer overflow in qcpfformat.dll via a specially crafted 'fmt' chunk, leading to arbitrary code execution in the context of the web browser.