Unscored severity · published Oct 4, 2002
CVE-2002-1014
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini…
–
CVSS
8.1%
EPSS
No
On KEV
Description
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.1% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
R2
Realjukebox 2 · Realnetworks
1.0.2.340; 1.0.2.379 · source: NVD
R2
Realjukebox 2 Plus · Realnetworks
1.0.2.340; 1.0.2.379 · source: NVD
RP
Realone Player · Realnetworks
6.0.10.505 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1014
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1014
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-07/0127.html
service.real.com
http://service.real.com/help/faq/security/bufferoverrun07092002.html
Vendor Advisory
http://www.iss.net/security_center/static/9538.php
US Government Resource
http://www.kb.cert.org/vuls/id/843667
Patch
http://www.securityfocus.com/bid/5217
More from Realjukebox 2
–
CVE-2002-1015
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script…