Lucene search

[email protected]CVE-2003-1509

HistoryOct 25, 2007 - 7:00 p.m.

CVE-2003-1509

2007-10-2519:00:00

[email protected]

web.nvd.nist.gov

real networks

realone

enterprise desktop

remote execution

arbitrary script

security vulnerability

cve-2003-1509

nvd

7.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.7%

JSON

Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser.

Affected configurations

NVD

Node

realnetworksrealone_enterprise_desktopMatch6.0.11.774

realnetworksrealone_playerMatch2.0

realnetworksrealone_playerMatch6.0.11.818

realnetworksrealone_playerMatch6.0.11.830

realnetworksrealone_playerMatch6.0.11.841

realnetworksrealone_playerMatch6.0.11.853

CPENameOperatorVersion
realnetworks:realone_enterprise_desktoprealnetworks realone enterprise desktopeq6.0.11.774
realnetworks:realone_playerrealnetworks realone playereq2.0
realnetworks:realone_playerrealnetworks realone playereq6.0.11.818
realnetworks:realone_playerrealnetworks realone playereq6.0.11.830
realnetworks:realone_playerrealnetworks realone playereq6.0.11.841
realnetworks:realone_playerrealnetworks realone playereq6.0.11.853

CPE	Name	Operator	Version
realnetworks:realone_enterprise_desktop	realnetworks realone enterprise desktop	eq	6.0.11.774
realnetworks:realone_player	realnetworks realone player	eq	2.0
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.818
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.830
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.841
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.853

References

service.real.com/help/faq/security/securityupdate_october2003.html

www.securityfocus.com/bid/8839

exchange.xforce.ibmcloud.com/vulnerabilities/13445

7.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.7%

JSON

Related for CVE-2003-1509

nvd1 cvelist1