Unscored severity · published Nov 23, 2004
CVE-2004-0273
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that…
–
CVSS
4%
EPSS
No
On KEV
Description
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RD
Realone Desktop Manager · Realnetworks
All versions, or not specified · source: NVD
RE
Realone Enterprise Desktop · Realnetworks
6.0.11.774 · source: NVD
RP
Realone Player · Realnetworks
1.0; 2.0; 2.0; 6.0.11.818; 6.0.11.830; 6.0.11.841; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0273
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0273
marc.info
http://marc.info/?l=bugtraq&m=107642978524321&w=2
Patch
http://service.real.com/help/faq/security/040123_player/EN/
US Government Resource
http://www.kb.cert.org/vuls/id/514734
Patch
http://www.securityfocus.com/bid/9580
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/15123
More from Realone Desktop Manager
–
CVE-2004-0258
Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via…
–
CVE-2003-0726
RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is…