EIP-2026-102968

This exploit demonstrates a local privilege escalation (LPE) vulnerability in RealPlayer 9 by replacing a shared library (cook.so.6.0) with a malicious version that binds a shell to a specified port. The attack leverages group-writeable configuration files in ~/.realnetworks/ to manipulate library paths.