1. CVE-Search
  2. CVE-2004-1094
ID CVE-2004-1094
Summary Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products. NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same.
References
Vulnerable Configurations
  • cpe:2.3:a:checkmark:checkmark_payroll:3.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:checkmark_payroll:3.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:checkmark:checkmark_payroll:3.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:checkmark_payroll:3.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:checkmark:checkmark_payroll:3.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:checkmark_payroll:3.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:checkmark:checkmark_payroll:3.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:checkmark_payroll:3.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:checkmark:checkmark_payroll:3.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:checkmark_payroll:3.9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:checkmark:checkmark_payroll:3.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:checkmark_payroll:3.9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:checkmark:checkmark_payroll:*:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:checkmark_payroll:*:*:*:*:*:*:*:*
  • cpe:2.3:a:checkmark:multiledger:6.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:multiledger:6.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:checkmark:multiledger:6.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:multiledger:6.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:checkmark:multiledger:7.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:multiledger:7.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:checkmark:multiledger:*:*:*:*:*:*:*:*
    cpe:2.3:a:checkmark:multiledger:*:*:*:*:*:*:*:*
  • cpe:2.3:a:innermedia:dynazip_library:5.00.00:*:*:*:*:*:*:*
    cpe:2.3:a:innermedia:dynazip_library:5.00.00:*:*:*:*:*:*:*
  • cpe:2.3:a:innermedia:dynazip_library:5.00.01:*:*:*:*:*:*:*
    cpe:2.3:a:innermedia:dynazip_library:5.00.01:*:*:*:*:*:*:*
  • cpe:2.3:a:innermedia:dynazip_library:5.00.02:*:*:*:*:*:*:*
    cpe:2.3:a:innermedia:dynazip_library:5.00.02:*:*:*:*:*:*:*
  • cpe:2.3:a:innermedia:dynazip_library:5.00.03:*:*:*:*:*:*:*
    cpe:2.3:a:innermedia:dynazip_library:5.00.03:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*
  • cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*
    cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 19-10-2018 - 15:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 11555
bugtraq
  • 20041027 EEYE: RealPlayer Zipped Skin File Buffer Overflow
  • 20041027 High Risk Vulnerability in RealPlayer
  • 20051223 dtSearch DUNZIP32.dll Buffer Overflow Vulnerability
  • 20060330 McAfee VirusScan DUNZIP32.dll Buffer Overflow Vulnerability
  • 20060906 IBM Lotus Notes DUNZIP32.dll Buffer Overflow Vulnerability
cert-vn VU#582498
confirm http://service.real.com/help/faq/security/041026_player/EN/
misc
osvdb 19906
sectrack
  • 1011944
  • 1012297
  • 1016817
secunia
  • 17096
  • 17394
  • 18194
  • 19451
sreason
vupen
  • ADV-2005-2057
  • ADV-2006-1176
xf
  • payroll-dunzip32-bo(22737)
  • realplayer-dunzip32-bo(17879)
Last major update 19-10-2018 - 15:30
Published 10-01-2005 - 05:00
Last modified 19-10-2018 - 15:30
Back to Top