NVD

Id
80011  
Name
CVE-2002-1015  
Description
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-10-04  
Modified Date
2008-09-05  
Seq
2002-1015  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
398941 80011 CVE-2002-1015 20020712 [SPSadvisory#47]RealONE Player Gold / RealJukebox2 skin file download vulnerability  View
398942 80011 CVE-2002-1015 http://service.real.com/help/faq/security/bufferoverrun07092002.html  View
398943 80011 CVE-2002-1015 realplayer-rjs-file-download(9539)  View
398944 80011 CVE-2002-1015 VU#888547  View
398945 80011 CVE-2002-1015 5210  View

Related JVN