Vulnerabilities > CVE-2016-9018 - NULL Pointer Dereference vulnerability in Realnetworks Realplayer 18.1.5.705

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
realnetworks
CWE-476
exploit available

Summary

Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a crafted .QCP media file.

Vulnerable Configurations

Part Description Count
Application
Realnetworks
1

Common Weakness Enumeration (CWE)

Exploit-Db

idEDB-ID:40617