CVE-2004-0273 | BDVDB-2026-7196 Detail

Description#

Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/514734
https://exchange.xforce.ibmcloud.com/vulnerabilities/15123
http://marc.info/?l=bugtraq&m=107642978524321&w=2
http://www.securityfocus.com/bid/9580
http://service.real.com/help/faq/security/040123_player/EN/

Exploit#

No public exploit known

History#

Version 12004-09-01Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.