Andreas Schmidt

**Name of the Vulnerable Software and Affected Versions** Internet Explorer versions 9 through 11 **Description** The issue is related to memory handling errors, allowing an attacker to execute arbitrary code or cause a denial of service via a specially crafted website. This is due to incorrect access to objects in memory in the context of the current user. The vulnerability was demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014. **Recommendations** For Internet Explorer versions 9 through 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 6 through 11 **Description** A remote code execution issue exists due to incorrect access to objects in memory, potentially causing memory corruption and allowing an attacker to execute arbitrary code in the context of the current user. This issue has been demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014, showcasing the vulnerability's exploitability. **Recommendations** For Microsoft Internet Explorer versions 6 through 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 RealPlayer Enterprise versions 2.1.2 and 2.1.3 Linux RealPlayer version 11.0.2.1744 HelixPlayer version 1.0.6 **Description** The issue is related to a heap-based buffer overflow that allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file. This is due to certain improper integer calculations. **Recommendations** For RealPlayer versions 11.0 through 11.1, update to a version that fixes the improper integer calculations issue. For RealPlayer SP versions 1.0 through 1.1.5, update to a version that fixes the improper integer calculations issue. For RealPlayer Enterprise versions 2.1.2 and 2.1.3, update to a version that fixes the improper integer calculations issue. For Linux RealPlayer version 11.0.2.1744, update to a version that fixes the improper integer calculations issue. For HelixPlayer version 1.0.6, update to a version that fixes the improper integer calculations issue.