7.6

CVE-2004-0258

Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Realnetworks ≫ Realone Enterprise Desktop Version 6.0.11.774
Realnetworks ≫ Realone Player Version 1.0
Realnetworks ≫ Realone Player Version 2.0
Realnetworks ≫ Realone Player Version 2.0 Edition win
Realnetworks ≫ Realone Player Version 6.0.11.818
Realnetworks ≫ Realone Player Version 6.0.11.830
Realnetworks ≫ Realone Player Version 6.0.11.841
Realnetworks ≫ Realone Player Version 6.0.11.853
Realnetworks ≫ Realone Player Version 6.0.11.868
Realnetworks ≫ Realplayer Version 8.0 Edition mac_os
Realnetworks ≫ Realplayer Version 8.0 Edition unix
Realnetworks ≫ Realplayer Version 8.0 Edition win32
Realnetworks ≫ Realplayer Version 10.0_beta
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.21% 0.935
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html
http://marc.info/?l=bugtraq&m=107608748813559&w=2
http://www.ciac.org/ciac/bulletins/o-075.shtml
http://www.kb.cert.org/vuls/id/473814
Third Party Advisory
US Government Resource
http://www.nextgenss.com/advisories/realone.txt
http://www.securityfocus.com/bid/9579
Patch
Vendor Advisory
http://www.service.real.com/help/faq/security/040123_player/EN/
https://exchange.xforce.ibmcloud.com/vulnerabilities/15040