Strix
26.1K

CVE-2003-0141

UnknownEPSS 2.96%

Last modified

CVE-2003-0141 is a vulnerability of currently unknown severity. The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.. EPSS estimates a 2.96% chance of exploitation in the next 30 days.

Description

The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.

Metrics

EPSS Probability
2.96%

85.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
RealnetworksRealone Enterprise Desktop6.0.11.774—
RealnetworksRealone Player2.0—
RealnetworksRealone Player6.0.10.505Gold
RealnetworksRealone Player6.0.11.818—
RealnetworksRealone Player6.0.11.830—
RealnetworksRealone Player6.0.11.841—
RealnetworksRealone Player6.0.11.853—
RealnetworksRealone Player9.0.0.288—
RealnetworksRealone Player9.0.0.297—
RealnetworksRealplayer8.0—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2003-0141?
The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.
How severe is CVE-2003-0141?
Severity scoring for CVE-2003-0141 is pending analysis. The EPSS model estimates a 2.96% probability of exploitation in the next 30 days.
How do I fix CVE-2003-0141?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2003-0141?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST