CVE-2003-0725

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0087.htmlVendor Advisory
http://lists.immunitysec.com/pipermail/dailydave/2003-August/000030.html
http://www.kb.cert.org/vuls/id/934932Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/8476Exploit, Patch, Vendor Advisory
http://www.service.real.com/help/faq/security/rootexploit082203.html
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0087.htmlVendor Advisory
http://lists.immunitysec.com/pipermail/dailydave/2003-August/000030.html
http://www.kb.cert.org/vuls/id/934932Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/8476Exploit, Patch, Vendor Advisory
http://www.service.real.com/help/faq/security/rootexploit082203.html

Timeline

Published: Oct 20, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-07265.1RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that referen CVE-2003-07272.1Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of se CVE-2003-07286.4Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a refer CVE-2003-07297.5Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename.CVE-2003-07307.5Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute a CVE-2003-073110.0CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST req CVE-2003-073210.0CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain admin CVE-2003-07336.8Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.CVE-2003-073410.0Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users CVE-2003-07357.5SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries,CVE-2003-07366.8Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script v CVE-2003-07375.0The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, w