CVE-2004-0387
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
97.1%
Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| realnetworks | realone_player | * | cpe:2.3:a:realnetworks:realone_player:*:*:*:*:*:*:*:* |
| realnetworks | realone_player | * | cpe:2.3:a:realnetworks:realone_player:*:*:enterprise:*:*:*:*:* |
| realnetworks | realone_player | 10_beta | cpe:2.3:a:realnetworks:realone_player:10_beta:*:*:*:*:*:*:* |
| realnetworks | realplayer | 8.0 | cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:* |
References
archives.neohapsis.com/archives/vulnwatch/2004-q1/0077.html
marc.info/?l=bugtraq&m=108135350810135&w=2
secunia.com/advisories/11314
www.ngssoftware.com/advisories/realr3t.txt
www.osvdb.org/displayvuln.php?osvdb_id=4977
www.securityfocus.com/bid/10070
www.service.real.com/help/faq/security/040406_r3t/en/
exchange.xforce.ibmcloud.com/vulnerabilities/15774
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
97.1%