CVE-2002-1014 Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long valu...
HighCVSS 7.5
EPSS 8.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realjukebox 2 | = 1.0.2.340 | No fix listed |
| realnetworks realjukebox 2 | = 1.0.2.379 | No fix listed |
| realnetworks realjukebox 2 plus | = 1.0.2.340 | No fix listed |
| realnetworks realjukebox 2 plus | = 1.0.2.379 | No fix listed |
| realnetworks realone player | = 6.0.10.505-gold | No fix listed |
References
- 20020712 [SPSadvisory#48]RealONE Player Gold / RealJukebox2 Buffer Overflow mailing-list
- service.real.com
- realplayer-rjs-controlnimage-bo(9538) vdb-entry vendor-advisory
- VU#843667 third-party-advisory us-government-resource
- 5217 patch vdb-entry vendor-advisory