TUCoPS :: HP Unsorted R

TUCoPS :: HP Unsorted R :: tb13230.htm
RealNetworks RealPlayer PLS File Memory Corruption Vulnerability
ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability
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