VulnerabilityModified

CVE-2004-0258

Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.

HIGH 7.6EPSS 7.21%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (7.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
EPSS: 7.21% probability · 94th percentile
CISA KEV: Not listed
Affected: realnetworks/realone desktop manager · realnetworks/realone enterprise desktop · realnetworks/realone player · realnetworks/realplayer
Source: cve@mitre.org

References

http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html
http://marc.info/?l=bugtraq&m=107608748813559&w=2
http://www.ciac.org/ciac/bulletins/o-075.shtml
http://www.kb.cert.org/vuls/id/473814Third Party Advisory, US Government Resource
http://www.nextgenss.com/advisories/realone.txt
http://www.securityfocus.com/bid/9579Patch, Vendor Advisory
http://www.service.real.com/help/faq/security/040123_player/EN/
https://exchange.xforce.ibmcloud.com/vulnerabilities/15040
http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html
http://marc.info/?l=bugtraq&m=107608748813559&w=2
http://www.ciac.org/ciac/bulletins/o-075.shtml
http://www.kb.cert.org/vuls/id/473814Third Party Advisory, US Government Resource
http://www.nextgenss.com/advisories/realone.txt
http://www.securityfocus.com/bid/9579Patch, Vendor Advisory
http://www.service.real.com/help/faq/security/040123_player/EN/
https://exchange.xforce.ibmcloud.com/vulnerabilities/15040

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.