CVE-2002-1015

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.04%

Published

Oct 4, 2002

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.

Affected Products (5)

realnetworks · realjukebox_2vulnerable

realnetworks · realjukebox_2_plusvulnerable

realnetworks · realone_playervulnerable

References (10)

http://archives.neohapsis.com/archives/bugtraq/2002-07/0130.html

http://service.real.com/help/faq/security/bufferoverrun07092002.html

http://www.iss.net/security_center/static/9539.php

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/888547

US Government Resource

http://www.securityfocus.com/bid/5210