Path Traversal in Realnetworks Realone Desktop Manager
CVE-2004-0273
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.
Affected products
- Realnetworks Realone_desktop_manager
- Realnetworks Realone_enterprise_desktop — versions 6.0.11.774
- Realnetworks Realone_player — versions 1.0, 2.0, 6.0.11.818
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)