CVE-2004-0273

Опубликовано: 23 нояб. 2004

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file.

Ссылки

http://marc.info/?l=bugtraq&m=107642978524321&w=2
http://service.real.com/help/faq/security/040123_player/EN/
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/514734
US Government Resource
http://www.securityfocus.com/bid/9580
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15123
http://marc.info/?l=bugtraq&m=107642978524321&w=2
http://service.real.com/help/faq/security/040123_player/EN/
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/514734
US Government Resource
http://www.securityfocus.com/bid/9580
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15123

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:realnetworks:realone_desktop_manager:*:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_enterprise_desktop:6.0.11.774:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:2.0:*:win:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:6.0.11.818:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:6.0.11.830:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:6.0.11.841:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:6.0.11.853:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:6.0.11.868:*:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00315

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-4pq3-767m-6x5g

github

почти 4 года назад