CVE-2004-1094

Severity

99%

Complexity

99%

Confidentiality

165%

Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products. NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same.

Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products. NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same.

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

Type

RealNetworks RealPlayer

First reported 20 years ago

2005-01-10 05:00:00

Last updated 6 years ago

2018-10-19 15:30:00

Affected Software

RealNetworks RealPlayer 10.0

10.0

RealNetworks RealPlayer 10.5

10.5

References

20041027 EEYE: RealPlayer Zipped Skin File Buffer Overflow

20041027 High Risk Vulnerability in RealPlayer

17096

Vendor Advisory

17394

Vendor Advisory

18194

Vendor Advisory

19451

296

653

1011944

1012297

1016817

http://service.real.com/help/faq/security/041026_player/EN/

VU#582498

Third Party Advisory, US Government Resource

http://www.networksecurity.fi/advisories/dtsearch.html

Vendor Advisory

http://www.networksecurity.fi/advisories/lotus-notes.html

http://www.networksecurity.fi/advisories/mcafee-virusscan.html

http://www.networksecurity.fi/advisories/multiledger.html

http://www.networksecurity.fi/advisories/payroll.html

19906

http://www.securiteam.com/windowsntfocus/6Z00W00EAM.html

20051223 dtSearch DUNZIP32.dll Buffer Overflow Vulnerability

20060330 McAfee VirusScan DUNZIP32.dll Buffer Overflow Vulnerability

20060906 IBM Lotus Notes DUNZIP32.dll Buffer Overflow Vulnerability

11555

Vendor Advisory

ADV-2005-2057

ADV-2006-1176

realplayer-dunzip32-bo(17879)

payroll-dunzip32-bo(22737)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.