CVEvulnerability
CVE-2004-0258
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-11-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Description
Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.
Affected configurations
• realnetworks realone desktop manager
• realnetworks realone enterprise desktop 6.0.11.774
• realnetworks realone player 1.0
• realnetworks realone player 2.0
• realnetworks realone player 6.0.11.818
• realnetworks realone player 6.0.11.830
• realnetworks realone player 6.0.11.841
• realnetworks realone player 6.0.11.853
• realnetworks realone player 6.0.11.868
• realnetworks realplayer 8.0
• realnetworks realplayer 10.0 beta
References
- http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=107608748813559&w=2 marc.info
- http://www.ciac.org/ciac/bulletins/o-075.shtml www.ciac.org
- http://www.kb.cert.org/vuls/id/473814 Third Party Advisory, US Government Resource
- http://www.nextgenss.com/advisories/realone.txt www.nextgenss.com
- http://www.securityfocus.com/bid/9579 Patch, Vendor Advisory
- http://www.service.real.com/help/faq/security/040123_player/EN/ www.service.real.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15040 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=107608748813559&w=2 marc.info
- http://www.ciac.org/ciac/bulletins/o-075.shtml www.ciac.org
- http://www.kb.cert.org/vuls/id/473814 Third Party Advisory, US Government Resource
- http://www.nextgenss.com/advisories/realone.txt www.nextgenss.com
- http://www.securityfocus.com/bid/9579 Patch, Vendor Advisory
- http://www.service.real.com/help/faq/security/040123_player/EN/ www.service.real.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15040 exchange.xforce.ibmcloud.com