CVE-2003-0141

Published Apr 2, 2003

Last updated 8 years ago

Overview

Description: The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5.1
Impact score: 6.4
Exploitability score: 4.9
Vector string: AV:N/AC:H/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:realnetworks:realone_enterprise_desktop:6.0.11.774:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "27DDB6F2-9EAF-4A77-BB3B-D3989E1D9458"
          },
          {
            "criteria": "cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CF6535A6-6647-4E60-B5AA-24DFC06360AE"
          },
          {
            "criteria": "cpe:2.3:a:realnetworks:realone_player:6.0.10.505:gold:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2BBC41FB-B9F5-47EB-97D8-3ACFC5182AAE"
          },
          {
            "criteria": "cpe:2.3:a:realnetworks:realone_player:6.0.11.818:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0C6BB6A9-B0CE-4C04-8481-53B7CB195264"
          },
          {
            "criteria": "cpe:2.3:a:realnetworks:realone_player:6.0.11.830:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "41688192-70B7-4C35-AE4F-FE116104137A"
          },
          {
            "criteria": "cpe:2.3:a:realnetworks:realone_player:6.0.11.841:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA11D9CD-113B-4977-B150-D6500552222A"
          },
          {
            "criteria": "cpe:2.3:a:realnetworks:realone_player:6.0.11.853:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BF391DD1-2912-49BF-BC9F-B9FA3771737F"
          },
          {
            "criteria": "cpe:2.3:a:realnetworks:realone_player:9.0.0.288:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D6083AD8-024A-41C7-8189-BE0827239090"
          },
          {
            "criteria": "cpe:2.3:a:realnetworks:realone_player:9.0.0.297:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "103892C8-6C98-4861-8252-0076EF1B1302"
          },
          {
            "criteria": "cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4E6051B4-1B15-44C0-B2CD-5504E68C60F2"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References