Vendor CVEs
RealNetworks
All CVEs
217 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2004-0774 | 0.00 | — | 0.02 | Nov 3, 2004 | RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1. | |||
| CVE-2005-0192 | 0.00 | — | 0.02 | Oct 6, 2004 | Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename. | |||
| CVE-2005-0190 | 0.00 | — | 0.04 | Sep 29, 2004 | Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an… | |||
| CVE-2004-0550 | 0.00 | — | 0.03 | Aug 6, 2004 | Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (period) characters. | |||
| CVE-2004-0387 | 0.00 | — | 0.03 | Jun 1, 2004 | Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file. | |||
| CVE-2004-0049 | 0.00 | — | 0.01 | Feb 17, 2004 | Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port. | |||
| CVE-2003-1509 | 0.00 | — | 0.02 | Dec 31, 2003 | Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is… | |||
| CVE-2003-1117 | 0.00 | — | 0.05 | Dec 31, 2003 | Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows remote attackers to cause a denial of service and possibly execute arbitrary code. | |||
| CVE-2003-0141 | 0.00 | — | 0.03 | Apr 2, 2003 | The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees… | |||
| CVE-2002-1321 | 0.00 | — | 0.03 | Dec 11, 2002 | Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain… | |||
| CVE-2002-1015 | 0.00 | — | 0.02 | Oct 4, 2002 | RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been… | |||
| CVE-2002-0415 | 0.00 | — | 0.01 | Aug 12, 2002 | Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275. | |||
| CVE-2002-0337 | 0.00 | — | 0.02 | Jun 25, 2002 | RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files. | |||
| CVE-1999-1369 | 0.00 | — | 0.01 | Apr 14, 1999 | Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges. | |||
| CVE-1999-1282 | 0.00 | — | 0.01 | Dec 10, 1998 | RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges. | |||
| CVE-1999-1045 | 0.00 | — | 0.02 | Jan 15, 1998 | pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request. | |||
| CVE-1999-0271 | 0.00 | — | 0.01 | Jan 15, 1998 | Progressive Networks Real Video server (pnserver) can be crashed remotely. |
- CVE-2004-0774Nov 3, 2004risk 0.00cvss —epss 0.02
RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.
- CVE-2005-0192Oct 6, 2004risk 0.00cvss —epss 0.02
Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.
- CVE-2005-0190Sep 29, 2004risk 0.00cvss —epss 0.04
Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an…
- CVE-2004-0550Aug 6, 2004risk 0.00cvss —epss 0.03
Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (period) characters.
- CVE-2004-0387Jun 1, 2004risk 0.00cvss —epss 0.03
Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file.
- CVE-2004-0049Feb 17, 2004risk 0.00cvss —epss 0.01
Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.
- CVE-2003-1509Dec 31, 2003risk 0.00cvss —epss 0.02
Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is…
- CVE-2003-1117Dec 31, 2003risk 0.00cvss —epss 0.05
Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
- CVE-2003-0141Apr 2, 2003risk 0.00cvss —epss 0.03
The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees…
- CVE-2002-1321Dec 11, 2002risk 0.00cvss —epss 0.03
Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain…
- CVE-2002-1015Oct 4, 2002risk 0.00cvss —epss 0.02
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been…
- CVE-2002-0415Aug 12, 2002risk 0.00cvss —epss 0.01
Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.
- CVE-2002-0337Jun 25, 2002risk 0.00cvss —epss 0.02
RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files.
- CVE-1999-1369Apr 14, 1999risk 0.00cvss —epss 0.01
Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges.
- CVE-1999-1282Dec 10, 1998risk 0.00cvss —epss 0.01
RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges.
- CVE-1999-1045Jan 15, 1998risk 0.00cvss —epss 0.02
pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request.
- CVE-1999-0271Jan 15, 1998risk 0.00cvss —epss 0.01
Progressive Networks Real Video server (pnserver) can be crashed remotely.
Page 5 of 5