CVE-2003-1509: Critical severity realnetworks realone player vulnerability

Published Dec 31, 2003

Updated

Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser.

Affected Software

6 affected components

RealNetworks RealOne Player=6.0.11.841

RealNetworks RealOne Player=2.0

RealNetworks Realone Enterprise Desktop=6.0.11.774

RealNetworks RealOne Player=6.0.11.830

RealNetworks RealOne Player=6.0.11.818

RealNetworks RealOne Player=6.0.11.853

Remediation

Patch Available

http://www.securityfocus.com/bid/8839

Event History

Dec 31, 2003

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Oct 25, 2007

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1509?

CVE-2003-1509 has a medium severity level as it allows remote attackers to execute arbitrary scripts in a user's local security zone.

How do I fix CVE-2003-1509?

To fix CVE-2003-1509, users should update to the latest version of RealOne Player or RealOne Enterprise Desktop as provided in the security update.

What software versions are affected by CVE-2003-1509?

CVE-2003-1509 affects RealOne Enterprise Desktop 6.0.11.774 and multiple versions of RealOne Player including 2.0, 6.0.11.818, 6.0.11.830, 6.0.11.841, and 6.0.11.853.

What type of attack does CVE-2003-1509 enable?

CVE-2003-1509 enables remote code execution attacks by allowing attackers to embed scripts in temporary files executed by the default web browser.

Is my system vulnerable to CVE-2003-1509?

If you are using any of the affected versions of RealOne Player or RealOne Enterprise Desktop, your system is vulnerable to CVE-2003-1509.