medium5.1
CVE-2004-1481
Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attacker…
Impact
Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realnetworks | Helix Player | Version 1.0 |
| Realnetworks | Realone Player | Versions 1.0, 2.0, 9.0.0.288, 9.0.0.297 |
| Realnetworks | Realplayer | All versions Versions 8.0, 10.0, 10.0_6.0.12.690, 10.5, 10.5_6.0.12.1016 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=ntbugtraq&m=109708374115061&w=2
- http://secunia.com/advisories/12672
- http://www.securityfocus.com/bid/11309
- http://www.service.real.com/help/faq/security/040928_player/EN/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17549
- http://marc.info/?l=ntbugtraq&m=109708374115061&w=2
- http://secunia.com/advisories/12672
- http://www.securityfocus.com/bid/11309
- http://www.service.real.com/help/faq/security/040928_player/EN/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17549