Unscored severity · published Oct 20, 2003
CVE-2003-0725
Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and…
–
CVSS
48.6%
EPSS
No
On KEV
Description
Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)48.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HU
Helix Universal Server · Realnetworks
8.0.1; 9.0; 9.0.1; 9.0.2.794 · source: NVD
RE
Realserver · Realnetworks
7.0; 7.0.1; 7.0.2; 8.0; 8.0.1; 8.0.2; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0725
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0725
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0087.html
lists.immunitysec.com
http://lists.immunitysec.com/pipermail/dailydave/2003-August/000030.html
Third Party Advisory
http://www.kb.cert.org/vuls/id/934932
Exploit
http://www.securityfocus.com/bid/8476
www.service.real.com
http://www.service.real.com/help/faq/security/rootexploit082203.html
More from Helix Universal Server
7.5
CVE-2004-0389
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as…
–
CVE-2004-0774
RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with…
–
CVE-2004-0049
Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port
–
CVE-2002-1643
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP…