cbcvebase.
CVE-2003-0141
published 2003-04-02

CVE-2003-0141: The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to…

PriorityP421medium5.1CVSS 2.0
AVNACHAuNCPIPAP
EPSS
2.96%
85.5th percentile
The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.

Affected

10 ranges
VendorProductVersion rangeFixed in
realnetworksrealone_enterprise_desktop——
realnetworksrealone_player——
realnetworksrealone_player——
realnetworksrealone_player——
realnetworksrealone_player——
realnetworksrealone_player——
realnetworksrealone_player——
realnetworksrealone_player——
realnetworksrealone_player——
realnetworksrealplayer——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.