Lucene search

K
nvd[email protected]NVD:CVE-2004-1481
HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-1481

2004-12-3105:00:00
web.nvd.nist.gov
1

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.26 Low

EPSS

Percentile

96.8%

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.

Affected configurations

NVD
Node
realnetworkshelix_playerMatch1.0linux
OR
realnetworksrealone_playerMatch1.0
OR
realnetworksrealone_playerMatch2.0
OR
realnetworksrealone_playerMatch9.0.0.288macos
OR
realnetworksrealone_playerMatch9.0.0.297macos
OR
realnetworksrealplayerMatch-enterprise
OR
realnetworksrealplayerMatch8.0
OR
realnetworksrealplayerMatch8.0mac_os_x
OR
realnetworksrealplayerMatch8.0unix
OR
realnetworksrealplayerMatch10.0
OR
realnetworksrealplayerMatch10.0linux
OR
realnetworksrealplayerMatch10.0de
OR
realnetworksrealplayerMatch10.0en
OR
realnetworksrealplayerMatch10.0ja
OR
realnetworksrealplayerMatch10.0beta
OR
realnetworksrealplayerMatch10.0betamac_os_x
OR
realnetworksrealplayerMatch10.0_6.0.12.690
OR
realnetworksrealplayerMatch10.5
OR
realnetworksrealplayerMatch10.5_6.0.12.1016beta
OR
realnetworksrealplayerMatch10.5_6.0.12.1040

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.26 Low

EPSS

Percentile

96.8%