TUCoPS :: HP Unsorted R

TUCoPS :: HP Unsorted R :: tb13232.htm
RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability
ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability
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