CVE-2003-0141

Published: Apr 2, 2003Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.

Affected (10)

Products: Realnetworks: Realone Enterprise Desktop, Realone Player, Realplayer

Realnetworks

3 products

Realone Enterprise Desktop

Realone Player

Realplayer

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Realnetworks Realone Enterprise Desktop	Version 6.0.11.774
Realnetworks Realone Player	Version 2.0
Realnetworks Realone Player	Version 6.0.10.505 gold
Realnetworks Realone Player	Version 6.0.11.818
Realnetworks Realone Player	Version 6.0.11.830
Realnetworks Realone Player	Version 6.0.11.841
Realnetworks Realone Player	Version 6.0.11.853
Realnetworks Realone Player	Version 9.0.0.288
Realnetworks Realone Player	Version 9.0.0.297
Realnetworks Realplayer	Version 8.0