Realnetworks Realserver — known CVE vulnerabilities

Every CVE whose affected-product data names Realnetworks Realserver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-1999-1045 — CVSS 7.8 (high): pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request.
• CVE-2000-0272 — CVSS 7.8 (high): RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.
• CVE-2000-0474 — CVSS 7.8 (high): Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource…
• CVE-2003-0725 — CVSS 7.5 (high): Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal…
• CVE-2000-0185 — CVSS 5.0 (medium): RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
• CVE-2000-1181 — CVSS 5.0 (medium): Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including…
• CVE-2000-0001 — CVSS 5.0 (medium): RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.
• CVE-1999-1369 — CVSS 4.6 (medium): Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users…