CVE-2004-1481

Published: Dec 31, 2004Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.

Affected (20)

Products: Realnetworks: Helix Player, Realone Player, Realplayer

3 products

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Realnetworks Helix Player	Version 1.0
Realnetworks Realone Player	Version 1.0
Realnetworks Realone Player	Version 2.0
Realnetworks Realone Player	Version 9.0.0.288
Realnetworks Realone Player	Version 9.0.0.297
Realnetworks Realplayer	All versions
Realnetworks Realplayer	Version 10.0
Realnetworks Realplayer	Version 10.0
Realnetworks Realplayer	Version 10.0
Realnetworks Realplayer	Version 10.0
Realnetworks Realplayer	Version 10.0
Realnetworks Realplayer	Version 10.0 beta
Realnetworks Realplayer	Version 10.0 beta
Realnetworks Realplayer	Version 10.0_6.0.12.690
Realnetworks Realplayer	Version 10.5
Realnetworks Realplayer	Version 10.5_6.0.12.1016 beta
Realnetworks Realplayer	Version 10.5_6.0.12.1040
Realnetworks Realplayer	Version 8.0
Realnetworks Realplayer	Version 8.0
Realnetworks Realplayer	Version 8.0