CVE-2002-1014

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Oct 4, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-10157.5RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local CVE-2002-10164.6Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key data files, performing CVE-2002-10172.1Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption ChallengeCVE-2002-10185.0The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackeCVE-2002-10195.0The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modifiCVE-2002-10205.0The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is excCVE-2002-10215.0BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.CVE-2002-10227.5BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.CVE-2002-10235.0BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.CVE-2002-10247.1Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet CVE-2002-10255.0JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the serveCVE-2002-10265.0Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via
CVE-2002-1014: High severity, CVSS 7.5 | Vulnix