CVE-2004-0258

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.

Affected Products (14)

realnetworks · realone_desktop_managervulnerable

realnetworks · realone_enterprise_desktopvulnerable

realnetworks · realone_playervulnerable

realnetworks · realplayervulnerable

References (16)

http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html

http://marc.info/?l=bugtraq&m=107608748813559&w=2

http://www.ciac.org/ciac/bulletins/o-075.shtml

http://www.kb.cert.org/vuls/id/473814

Third Party AdvisoryUS Government Resource

http://www.nextgenss.com/advisories/realone.txt

http://www.securityfocus.com/bid/9579

PatchVendor Advisory

http://www.service.real.com/help/faq/security/040123_player/EN/

https://exchange.xforce.ibmcloud.com/vulnerabilities/15040