CVE-2003-0141: Realnetworks Realone Enterprise Desktop

Medium severity, CVSS 5.1. EPSS: 3% chance of exploitation in the next 30 days.

The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.

Affected products

• Realnetworks Realone Enterprise Desktop: version 6.0.11.774 only
• Realnetworks Realone Player: version 2.0 only; version 6.0.10.505 only; version 6.0.11.818 only; version 6.0.11.830 only; version 6.0.11.841 only; version 6.0.11.853 only; …
• Realnetworks Realplayer: version 8.0 only

Published 2003-04-02. Last modified 2026-06-16.