CVE-2011-2950

This Metasploit module exploits a heap overflow in RealNetworks RealPlayer when parsing a maliciously crafted QCP file. It leverages a static buffer overflow in qcpfformat.dll to achieve remote code execution via a specially crafted 'fmt' chunk.

This Metasploit module exploits a heap overflow in RealNetworks RealPlayer when parsing a maliciously crafted .QCP file. The exploit leverages a static 256-byte buffer overflow in qcpfformat.dll via a specially crafted 'fmt' chunk, leading to arbitrary code execution in the context of the web browser.