Unscored severity · published Oct 4, 2002
CVE-2002-1015
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script…
–
CVSS
2%
EPSS
No
On KEV
Description
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
R2
Realjukebox 2 · Realnetworks
1.0.2.340; 1.0.2.379 · source: NVD
R2
Realjukebox 2 Plus · Realnetworks
1.0.2.340; 1.0.2.379 · source: NVD
RP
Realone Player · Realnetworks
6.0.10.505 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1015
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1015
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-07/0130.html
service.real.com
http://service.real.com/help/faq/security/bufferoverrun07092002.html
Patch
http://www.iss.net/security_center/static/9539.php
US Government Resource
http://www.kb.cert.org/vuls/id/888547
Patch
http://www.securityfocus.com/bid/5210
More from Realjukebox 2
–
CVE-2002-1014
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini…