CVE-2002-1321

CVE-2002-1321 describes multiple buffer overflow vulnerabilities in RealOne and RealPlayer, allowing remote attackers to execute arbitrary code. These flaws can be triggered through specially crafted SMIL files with long parameters, excessively long filenames in RTSP requests (e.g., from .m3u files), or long filenames within "Now Playing" options of downloaded files. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been identified, the potential for remote code execution remains a critical concern.