Lucene search

[email protected]CVE-2003-0141

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2003-0141

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

realone player

realplayer

png

deflate algorithm

remote attackers

heap corruption

memory overwrite

graphic file

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

JSON

The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.

Affected configurations

NVD

Node

realnetworksrealone_enterprise_desktopMatch6.0.11.774

realnetworksrealone_playerMatch2.0

realnetworksrealone_playerMatch6.0.10.505gold

realnetworksrealone_playerMatch6.0.11.818

realnetworksrealone_playerMatch6.0.11.830

realnetworksrealone_playerMatch6.0.11.841

realnetworksrealone_playerMatch6.0.11.853

realnetworksrealone_playerMatch9.0.0.288

realnetworksrealone_playerMatch9.0.0.297

realnetworksrealplayerMatch8.0

CPENameOperatorVersion
realnetworks:realone_enterprise_desktoprealnetworks realone enterprise desktopeq6.0.11.774
realnetworks:realone_playerrealnetworks realone playereq2.0
realnetworks:realone_playerrealnetworks realone playereq6.0.10.505
realnetworks:realone_playerrealnetworks realone playereq6.0.11.818
realnetworks:realone_playerrealnetworks realone playereq6.0.11.830
realnetworks:realone_playerrealnetworks realone playereq6.0.11.841
realnetworks:realone_playerrealnetworks realone playereq6.0.11.853
realnetworks:realone_playerrealnetworks realone playereq9.0.0.288
realnetworks:realone_playerrealnetworks realone playereq9.0.0.297
realnetworks:realplayerrealnetworks realplayereq8.0

CPE	Name	Operator	Version
realnetworks:realone_enterprise_desktop	realnetworks realone enterprise desktop	eq	6.0.11.774
realnetworks:realone_player	realnetworks realone player	eq	2.0
realnetworks:realone_player	realnetworks realone player	eq	6.0.10.505
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.818
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.830
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.841
realnetworks:realone_player	realnetworks realone player	eq	6.0.11.853
realnetworks:realone_player	realnetworks realone player	eq	9.0.0.288
realnetworks:realone_player	realnetworks realone player	eq	9.0.0.297
realnetworks:realplayer	realnetworks realplayer	eq	8.0

References

archives.neohapsis.com/archives/vulnwatch/2003-q1/0156.html

marc.info/?l=bugtraq&m=104887465427579&w=2

www.coresecurity.com/common/showdoc.php?idx=311&idxseccion=10

www.kb.cert.org/vuls/id/705761

www.securityfocus.com/bid/7177

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

JSON

Related for CVE-2003-0141

nvd1 nessus1 cvelist1