Lucene search

[email protected]CVE-2004-1798

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-1798

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

realone player

cve-2004-1798

remote attackers

smil presentation

security vulnerability

7.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.7%

JSON

RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the “My Computer” zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a “file:javascript:” URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726.

CPENameOperatorVersion
realnetworks:realone_playerrealnetworks realone playereq6.0.11.841
realnetworks:realone_playerrealnetworks realone playereq2.0
realnetworks:realone_enterprise_desktoprealnetworks realone enterprise desktopeq6.0.11.774
realnetworks:realone_playerrealnetworks realone playereq6.0.11.830
realnetworks:realplayerrealnetworks realplayereq8.0
realnetworks:realone_playerrealnetworks realone playereq6.0.11.868
realnetworks:realone_playerrealnetworks realone playereq1.0
realnetworks:realone_playerrealnetworks realone playereq6.0.10.505
realnetworks:realone_playerrealnetworks realone playereq6.0.11.818
realnetworks:realone_playerrealnetworks realone playereq6.0.11.853

CPE	Name	Operator	Version
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.841
realnetworks:realone_player	realnetworks realone player	eq	2.0
realnetworks:realone_enterprise_desktop	realnetworks realone enterprise desktop	eq	6.0.11.774
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.830
realnetworks:realplayer	realnetworks realplayer	eq	8.0
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.868
realnetworks:realone_player	realnetworks realone player	eq	1.0
realnetworks:realone_player	realnetworks realone player	eq	6.0.10.505
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.818
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.853

References

secunia.com/advisories/9584

securitytracker.com/id?1008647

www.osvdb.org/3826

www.securityfocus.com/archive/1/349086

www.securityfocus.com/bid/9378

exchange.xforce.ibmcloud.com/vulnerabilities/14168

7.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.7%

JSON

Related for CVE-2004-1798

cve1 checkpoint_advisories1