Vulnerabilities > CVE-2002-1014 - Unspecified vulnerability in Realnetworks Realjukebox 2, Realjukebox 2 Plus and Realone Player
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN realnetworks
exploit available
Summary
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |
Exploit-Db
| description | Real Networks RealJukebox 1.0.2/RealOne 6.0.10 Player Gold Skinfile Buffer Overflow. CVE-2002-1014. Remote exploit for windows platform |
| id | EDB-ID:21615 |
| last seen | 2016-02-02 |
| modified | 2002-07-12 |
| published | 2002-07-12 |
| reporter | UNYUN |
| source | https://www.exploit-db.com/download/21615/ |
| title | Real Networks RealJukebox 1.0.2/RealOne 6.0.10 Player Gold Skinfile Buffer Overflow |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0127.html
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0127.html
- http://service.real.com/help/faq/security/bufferoverrun07092002.html
- http://service.real.com/help/faq/security/bufferoverrun07092002.html
- http://www.iss.net/security_center/static/9538.php
- http://www.iss.net/security_center/static/9538.php
- http://www.kb.cert.org/vuls/id/843667
- http://www.kb.cert.org/vuls/id/843667
- http://www.securityfocus.com/bid/5217
- http://www.securityfocus.com/bid/5217