critical9.3
CVE-2004-0273
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via a…
Impact
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realnetworks | Realone Desktop Manager | All versions |
| Realnetworks | Realone Enterprise Desktop | Version 6.0.11.774 |
| Realnetworks | Realone Player | Versions 1.0, 2.0, 6.0.11.818, 6.0.11.830, 6.0.11.841, 6.0.11.853 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107642978524321&w=2
- http://service.real.com/help/faq/security/040123_player/EN/
- http://www.kb.cert.org/vuls/id/514734
- http://www.securityfocus.com/bid/9580
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15123
- http://marc.info/?l=bugtraq&m=107642978524321&w=2
- http://service.real.com/help/faq/security/040123_player/EN/
- http://www.kb.cert.org/vuls/id/514734
- http://www.securityfocus.com/bid/9580
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15123