Realnetworks Realone Desktop Manager vulnerabilities

3 CVEs affecting Realnetworks Realone Desktop Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0273, published 2004-11-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0258, published 2004-11-23. High severity, CVSS 7.6. EPSS: 7.2% chance of exploitation in the next 30 days. Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT,…
CVE-2003-0726, published 2003-10-20. Medium severity, CVSS 5.1. EPSS: 6.8% chance of exploitation in the next 30 days. RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security…
CVE-2004-0273, published 2004-11-23. High severity, CVSS 9.3. EPSS: 4% chance of exploitation in the next 30 days. Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot)…