CVE-2004-1481

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.

Affected products

RealNetworks Helix Player: 1.0
RealNetworks Realone Player: 1.0, 2.0, 9.0.0.288, 9.0.0.297
RealNetworks Realplayer: 8.0, 10.0, 10.0-beta, 10.0_6.0.12.690, 10.5, 10.5_6.0.12.1016-beta (+1)

References

http://marc.info/?l=ntbugtraq&m=109708374115061&w=2
http://secunia.com/advisories/12672
http://www.securityfocus.com/bid/11309
http://www.service.real.com/help/faq/security/040928_player/EN/
https://exchange.xforce.ibmcloud.com/vulnerabilities/17549
http://marc.info/?l=ntbugtraq&m=109708374115061&w=2
http://secunia.com/advisories/12672
http://www.securityfocus.com/bid/11309
http://www.service.real.com/help/faq/security/040928_player/EN/
https://exchange.xforce.ibmcloud.com/vulnerabilities/17549

Get alerted when CVE-2004-1481 or the next vulnerability affects your stack