CVE-2004-1481

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.

• http://marc.info/?l=ntbugtraq&m=109708374115061&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/12672Third Party Advisory
• http://www.securityfocus.com/bid/11309Patch, Third Party Advisory, VDB Entry
• http://www.service.real.com/help/faq/security/040928_player/EN/Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17549Third Party Advisory, VDB Entry
• http://marc.info/?l=ntbugtraq&m=109708374115061&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/12672Third Party Advisory
• http://www.securityfocus.com/bid/11309Patch, Third Party Advisory, VDB Entry
• http://www.service.real.com/help/faq/security/040928_player/EN/Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17549Third Party Advisory, VDB Entry

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1475Multiple stack-based buffer overflows in xine-lib 1-rc2 thro…
• CVE-2004-1476Stack-based buffer overflow in the VideoCD (VCD) code in xin…
• CVE-2004-1477Cross-site scripting (XSS) vulnerability in the Management C…
• CVE-2004-1478JRun 4.0 does not properly generate and handle the JSESSIONI…
• CVE-2004-1479Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2004-1480Unknown vulnerability in the management station in HP Storag…
• CVE-2004-1482The sbuf_getmsg function in BNC incorrectly handles backspac…
• CVE-2004-1483Multiple unknown vulnerabilities in the ActiveX and HTML fil…
• CVE-2004-1484Format string vulnerability in the _msg function in error.c …
• CVE-2004-1485Buffer overflow in the TFTP client in InetUtils 1.4.2 allows…
• CVE-2004-1486Unknown vulnerability in Serviceguard A.11.13 through A.11.1…
• CVE-2004-1487wget 1.8.x and 1.9.x allows a remote malicious web server to…