| Vulnerability Name: | CVE-2002-1014 (CCN-9538) | ||||||||
| Assigned: | 2002-07-12 | ||||||||
| Published: | 2002-07-12 | ||||||||
| Updated: | 2008-09-05 | ||||||||
| Summary: | Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: BUGTRAQ Type: UNKNOWN 20020712 [SPSadvisory#48]RealONE Player Gold / RealJukebox2 Buffer Overflow Source: CCN Type: SPS Advisory #48 RealONE Player Gold / RealJukebox2 Buffer Overflow Source: MITRE Type: CNA CVE-2002-1014 Source: CCN Type: RealNetworks Web site RealNetworks Support: Buffer Overrun Exploit Source: CONFIRM Type: UNKNOWN http://service.real.com/help/faq/security/bufferoverrun07092002.html Source: XF Type: Vendor Advisory realplayer-rjs-controlnimage-bo(9538) Source: CCN Type: US-CERT VU#843667 Real Networks RealJukebox2 vulnerable to arbitrary code execution via crafted skin file Source: CERT-VN Type: US Government Resource VU#843667 Source: CCN Type: OSVDB ID: 5036 RealJukebox/RealOne RFS skin.ini CONTROL1Image Overflow Source: BID Type: Patch, Vendor Advisory 5217 Source: CCN Type: BID-5217 Real Networks RealJukebox/RealOne Player Gold Skinfile Buffer Overflow Source: XF Type: UNKNOWN realplayer-rjs-controlnimage-bo(9538) | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||