Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Realnetworks Subscribe
Filtered by product Realjukebox 2 Plus
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-1014 1 Realnetworks 3 Realjukebox 2, Realjukebox 2 Plus, Realone Player 2008-09-05 7.5 HIGH N/A
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.
CVE-2002-1015 1 Realnetworks 3 Realjukebox 2, Realjukebox 2 Plus, Realone Player 2008-09-05 7.5 HIGH N/A
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.