Vulnerabilities > CVE-2016-9018 - NULL Pointer Dereference vulnerability in Realnetworks Realplayer 18.1.5.705

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
realnetworks
CWE-476
exploit available

Summary

Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a crafted .QCP media file.

Vulnerable Configurations

Part Description Count
Application
Realnetworks
1

Common Weakness Enumeration (CWE)

Exploit-Db

idEDB-ID:40617