CVE-2002-1015: High severity RealNetworks Realjukebox 2 Plus vulnerability
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1015?
CVE-2002-1015 is considered a moderate severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2002-1015?
To mitigate CVE-2002-1015, users should update to the latest version of RealJukebox or RealOne Player that addresses this vulnerability.
What products are affected by CVE-2002-1015?
CVE-2002-1015 affects RealJukebox 2 versions 1.0.2.340 and 1.0.2.379, as well as RealOne Player Gold version 6.0.10.505.
Can CVE-2002-1015 be exploited remotely?
Yes, CVE-2002-1015 can be exploited by remote attackers through specially crafted RJS archives.
What type of attack is associated with CVE-2002-1015?
CVE-2002-1015 is associated with arbitrary script execution in the Local computer zone.