Lucene search

[email protected]CVE-2004-0258

HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0258

2004-11-2305:00:00

[email protected]

web.nvd.nist.gov

cve-2004-0258

buffer overflow

realone player

realplayer

remote code execution

nvd

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.137 Low

EPSS

Percentile

95.7%

JSON

Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.

Affected configurations

NVD

Node

realnetworksrealone_desktop_manager

realnetworksrealone_enterprise_desktopMatch6.0.11.774

realnetworksrealone_playerMatch1.0

realnetworksrealone_playerMatch2.0

realnetworksrealone_playerMatch2.0win

realnetworksrealone_playerMatch6.0.11.818

realnetworksrealone_playerMatch6.0.11.830

realnetworksrealone_playerMatch6.0.11.841

realnetworksrealone_playerMatch6.0.11.853

realnetworksrealone_playerMatch6.0.11.868

realnetworksrealplayerMatch8.0mac_os

realnetworksrealplayerMatch8.0unix

realnetworksrealplayerMatch8.0win32

realnetworksrealplayerMatch10.0_beta

CPENameOperatorVersion
realnetworks:realone_desktop_managerrealnetworks realone desktop managereq*
realnetworks:realone_enterprise_desktoprealnetworks realone enterprise desktopeq6.0.11.774
realnetworks:realone_playerrealnetworks realone playereq1.0
realnetworks:realone_playerrealnetworks realone playereq2.0
realnetworks:realone_playerrealnetworks realone playereq6.0.11.818
realnetworks:realone_playerrealnetworks realone playereq6.0.11.830
realnetworks:realone_playerrealnetworks realone playereq6.0.11.841
realnetworks:realone_playerrealnetworks realone playereq6.0.11.853
realnetworks:realone_playerrealnetworks realone playereq6.0.11.868
realnetworks:realplayerrealnetworks realplayereq8.0

CPE	Name	Operator	Version
realnetworks:realone_desktop_manager	realnetworks realone desktop manager	eq	*
realnetworks:realone_enterprise_desktop	realnetworks realone enterprise desktop	eq	6.0.11.774
realnetworks:realone_player	realnetworks realone player	eq	1.0
realnetworks:realone_player	realnetworks realone player	eq	2.0
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.818
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.830
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.841
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.853
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.868
realnetworks:realplayer	realnetworks realplayer	eq	8.0

Rows per page:

1-10 of 111

References

archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html

marc.info/?l=bugtraq&m=107608748813559&w=2

www.ciac.org/ciac/bulletins/o-075.shtml

www.kb.cert.org/vuls/id/473814

www.nextgenss.com/advisories/realone.txt

www.securityfocus.com/bid/9579

www.service.real.com/help/faq/security/040123_player/EN/

exchange.xforce.ibmcloud.com/vulnerabilities/15040

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.137 Low

EPSS

Percentile

95.7%

JSON

Related for CVE-2004-0258

nvd1 checkpoint_advisories1 cvelist1 nessus1