CVE-2003-0725: Buffer Overflow

Published Sep 3, 2003

Updated

Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.

Affected Software

12 affected components

RealNetworks Helix Universal Server=8.0.1

RealNetworks Helix Universal Server=9.0

RealNetworks Helix Universal Server=9.0.1

RealNetworks Helix Universal Server=9.0.2.794

RealNetworks RealServer=7.0

RealNetworks RealServer=7.0.1

RealNetworks RealServer=7.0.2

RealNetworks RealServer=8.0

RealNetworks RealServer=8.0.1

RealNetworks RealServer=8.0.2

RealNetworks RealServer=8.0_beta

RealNetworks RealServer=g2_1.0

Remediation

Patch Available

http://www.securityfocus.com/bid/8476

Event History

Sep 3, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Oct 20, 2003

Data Sourced

via NVD·04:00 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0725?

CVE-2003-0725 is classified as a critical vulnerability that allows remote attackers to execute arbitrary code.

How do I fix CVE-2003-0725?

To mitigate CVE-2003-0725, you should update to the latest version of RealNetworks Helix Universal Server or RealServer that addresses this buffer overflow.

What are the affected versions of software for CVE-2003-0725?

CVE-2003-0725 affects RealNetworks Helix Universal Server versions 8.0.1 and 9.0, as well as various versions of RealServer including 7.0 to 8.0.2.

What causes CVE-2003-0725 vulnerability?

CVE-2003-0725 is caused by a buffer overflow in the RTSP protocol parser of the View Source plug-in.

Can CVE-2003-0725 be exploited remotely?

Yes, CVE-2003-0725 can be exploited remotely, allowing attackers to run arbitrary code without authentication.