CVE-2010-3749 Information

Description

The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method which allows remote attackers to download an arbitrary program onto a client machine and execute this program via a \ (double quote) in an argument to the RecordClip method aka \parameter injection.\

Reference

http://service.real.com/realplayer/security/10152010_player/en/ http://www.exploit-db.com/exploits/15991 http://www.securityfocus.com/bid/44144 http://www.securityfocus.com/bid/44443 http://www.zerodayinitiative.com/advisories/ZDI-10-211/