Lucene search

[email protected]CVE-2004-1481

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-1481

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-1481

realplayer

realone player

integer overflow

remote code execution

smil file

buffer overflow

8.2 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.26 Low

EPSS

Percentile

96.7%

JSON

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.

CPENameOperatorVersion
realnetworks:realplayerrealnetworks realplayereq10.0
realnetworks:realone_playerrealnetworks realone playereq2.0
realnetworks:realplayerrealnetworks realplayereq8.0
realnetworks:realone_playerrealnetworks realone playereq1.0
realnetworks:realplayerrealnetworks realplayereq10.0_6.0.12.690
realnetworks:realplayerrealnetworks realplayereq10.5
realnetworks:realplayerrealnetworks realplayereq10.5_6.0.12.1040
realnetworks:helix_playerrealnetworks helix playereq1.0
realnetworks:realplayerrealnetworks realplayereq10.5_6.0.12.1016
realnetworks:realplayerrealnetworks realplayereq-

CPE	Name	Operator	Version
realnetworks:realplayer	realnetworks realplayer	eq	10.0
realnetworks:realone_player	realnetworks realone player	eq	2.0
realnetworks:realplayer	realnetworks realplayer	eq	8.0
realnetworks:realone_player	realnetworks realone player	eq	1.0
realnetworks:realplayer	realnetworks realplayer	eq	10.0_6.0.12.690
realnetworks:realplayer	realnetworks realplayer	eq	10.5
realnetworks:realplayer	realnetworks realplayer	eq	10.5_6.0.12.1040
realnetworks:helix_player	realnetworks helix player	eq	1.0
realnetworks:realplayer	realnetworks realplayer	eq	10.5_6.0.12.1016
realnetworks:realplayer	realnetworks realplayer	eq	-

Rows per page:

1-10 of 121

References

marc.info/?l=ntbugtraq&m=109708374115061&w=2

secunia.com/advisories/12672

www.securityfocus.com/bid/11309

www.service.real.com/help/faq/security/040928_player/EN/

exchange.xforce.ibmcloud.com/vulnerabilities/17549

8.2 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.26 Low

EPSS

Percentile

96.7%

JSON

Related for CVE-2004-1481

checkpoint_advisories1 ubuntucve1 cve1 nessus1