CVE-2002-0415: Realnetworks Realplayer

Low severity, CVSS 1.7. EPSS: 1.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.

Affected products

• Realnetworks Realplayer: version 6.0 only

Published 2002-08-12. Last modified 2026-06-16.