CVE-2002-1014

Опубликовано: 04 окт. 2002

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-07/0127.html
http://service.real.com/help/faq/security/bufferoverrun07092002.html
http://www.iss.net/security_center/static/9538.php
Vendor Advisory
http://www.kb.cert.org/vuls/id/843667
US Government Resource
http://www.securityfocus.com/bid/5217
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-07/0127.html
http://service.real.com/help/faq/security/bufferoverrun07092002.html
http://www.iss.net/security_center/static/9538.php
Vendor Advisory
http://www.kb.cert.org/vuls/id/843667
US Government Resource
http://www.securityfocus.com/bid/5217
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:realnetworks:realjukebox_2:1.0.2.340:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realjukebox_2:1.0.2.379:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realjukebox_2_plus:1.0.2.340:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realjukebox_2_plus:1.0.2.379:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:6.0.10.505:gold:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.17024

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-m2jv-pj4j-4gvm

github

больше 3 лет назад