RealNetworks RealPlayer before 15.0.4.53 and RealPlayer SP 1.0 through 1.1.5 does not properly parse ASMRuleBook data in RealMedia files which allows remote attackers to execute arbitrary code via a crafted file.