Unscored severity · published Nov 23, 2004
CVE-2004-0258
Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via…
–
CVSS
7.2%
EPSS
No
On KEV
Description
Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.2% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RD
Realone Desktop Manager · Realnetworks
All versions, or not specified · source: NVD
RE
Realone Enterprise Desktop · Realnetworks
6.0.11.774 · source: NVD
RP
Realone Player · Realnetworks
1.0; 2.0; 2.0; 6.0.11.818; 6.0.11.830; 6.0.11.841; +2 more · source: NVD
RE
Realplayer · Realnetworks
8.0; 8.0; 8.0; 10.0_beta · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0258
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0258
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html
marc.info
http://marc.info/?l=bugtraq&m=107608748813559&w=2
www.ciac.org
http://www.ciac.org/ciac/bulletins/o-075.shtml
Third Party Advisory
http://www.kb.cert.org/vuls/id/473814
www.nextgenss.com
http://www.nextgenss.com/advisories/realone.txt
Patch
http://www.securityfocus.com/bid/9579
More from Realone Desktop Manager
–
CVE-2004-0273
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that…
–
CVE-2003-0726
RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is…