CVE-2004-1481
published 2004-12-31CVE-2004-1481: Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote…
PriorityP426medium5.1CVSS 2.0
AVNACHAuNCPIPAP
EPSS
4.28%
89.9th percentile
Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| realnetworks | helix_player | — | — |
| realnetworks | helix_player | — | — |
| realnetworks | helix_player | — | — |
| realnetworks | helix_player | — | — |
| realnetworks | helix_player | — | — |
| realnetworks | helix_player | — | — |
| realnetworks | realone_player | — | — |
| realnetworks | realone_player | — | — |
| realnetworks | realone_player | — | — |
| realnetworks | realone_player | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
| realnetworks | realplayer | — | — |
CVSS provenance
nvdv2.05.1MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
vendor_redhat5.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-595r-v88j-xqx7: Integer overflow in RealNetworks RealPlayer 8, 10, and 10
ghsa_unreviewed·2022-05-01·CVSS 5.1
CVE-2005-2629 [MEDIUM] GHSA-595r-v88j-xqx7: Integer overflow in RealNetworks RealPlayer 8, 10, and 10
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.
GHSA
GHSA-j7c5-qv2j-22qj: Integer overflow in pnen3260
ghsa_unreviewed·2022-04-29
CVE-2004-1481 [MEDIUM] GHSA-j7c5-qv2j-22qj: Integer overflow in pnen3260
Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.
Red Hat
security flaw
vendor_redhat·2005-11-10·CVSS 5.1
CVE-2005-2629 [MEDIUM] security flaw
security flaw
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.
No detection rules found.
No public exploits indexed.
http://marc.info/?l=ntbugtraq&m=109708374115061&w=2http://secunia.com/advisories/12672http://www.securityfocus.com/bid/11309http://www.service.real.com/help/faq/security/040928_player/EN/https://exchange.xforce.ibmcloud.com/vulnerabilities/17549http://marc.info/?l=ntbugtraq&m=109708374115061&w=2http://secunia.com/advisories/12672http://www.securityfocus.com/bid/11309http://www.service.real.com/help/faq/security/040928_player/EN/https://exchange.xforce.ibmcloud.com/vulnerabilities/17549
2004-12-31
Published