Vulnerability in Realnetworks Realjukebox 2
CVE-2002-1014
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.
EPSS: 0.081 (94.2th percentile) — read the EPSS interpretation.
Affected products
- Realnetworks Realjukebox_2 — versions 1.0.2.340, 1.0.2.379
- Realnetworks Realjukebox_2_plus — versions 1.0.2.340, 1.0.2.379
- Realnetworks Realone_player — versions 6.0.10.505
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)