CVE-2002-1014

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-10-04 · updated 2026-06-16

Description

Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.

Affected products

RealNetworks Realjukebox 2: 1.0.2.340, 1.0.2.379
RealNetworks Realjukebox 2 Plus: 1.0.2.340, 1.0.2.379
RealNetworks Realone Player: 6.0.10.505-gold

References

http://archives.neohapsis.com/archives/bugtraq/2002-07/0127.html
http://service.real.com/help/faq/security/bufferoverrun07092002.html
http://www.iss.net/security_center/static/9538.php
http://www.kb.cert.org/vuls/id/843667
http://www.securityfocus.com/bid/5217
http://archives.neohapsis.com/archives/bugtraq/2002-07/0127.html
http://service.real.com/help/faq/security/bufferoverrun07092002.html
http://www.iss.net/security_center/static/9538.php
http://www.kb.cert.org/vuls/id/843667
http://www.securityfocus.com/bid/5217

Get alerted when CVE-2002-1014 or the next vulnerability affects your stack