Skip to content

CVE-2016-9018 Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a crafted .QCP media file.

MediumCVSS 5.5 EPSS 8.1% PoC
Published
Updated
Exploit status
Proof-of-concept only
Sign in for asset impact Search another CVE

Description

Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a crafted .QCP media file.

Affected products

ProductAffected versionsFixed in
realnetworks realplayer = 18.1.5.705 No fix listed

References

  • 94239 third-party-advisory vdb-entry
  • 40617 exploit third-party-advisory