Approved changes feed: RSS · Atom

cpe:2.3:a:realnetworks:realjukebox_2_plus:1.0.2.340:*:*:*:*:*:*:*

part: a version: 1.0.2.340 update: *

VendorRealnetworks (944b0662-a257-59bc-8fc3-d9f6c6d401e0)
ProductRealjukebox 2 Plus (cd975465-16d4-5437-99fa-d8961b91ddc2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-1015 vulnerable 2026-06-03 14:26:15.596238 Details available
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T03:12:16.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1014 vulnerable 2026-06-03 14:26:15.594497 Details available
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T03:12:16.891Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.