CVE-2002-1321: Realnetworks Realone Player

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain "Now Playing" options on a downloaded file with a long filename.

Affected products

• Realnetworks Realone Player: version 2.0 only
• Realnetworks Realplayer: any version; version 6.0 only; version 7.0 only; version 8.0 only

Published 2002-12-11. Last modified 2026-06-16.