CVE-2002-1014: Realnetworks Realjukebox 2

High severity, CVSS 7.5. EPSS: 8.1% chance of exploitation in the next 30 days.

Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.

Affected products

• Realnetworks Realjukebox 2: version 1.0.2.340 only; version 1.0.2.379 only
• Realnetworks Realjukebox 2 Plus: version 1.0.2.340 only; version 1.0.2.379 only
• Realnetworks Realone Player: version 6.0.10.505 only

Published 2002-10-04. Last modified 2026-06-16.