CVE-2013-7260

This exploit leverages a buffer overflow in RealNetworks RealPlayer (CVE-2013-7260) via a malformed RMP file to achieve remote code execution. It uses ROP gadgets and shellcode to bypass DEP and execute arbitrary code (e.g., calc.exe).

This Metasploit module exploits a stack-based buffer overflow in RealNetworks RealPlayer versions 16.0.3.51 and 16.0.2.32 via a malformed XML declaration in an .RMP file. It uses ROP gadgets to bypass DEP and execute arbitrary payloads.