CVE-2004-1094 Memory corruption in n/a
Remote attackers can execute arbitrary code via a crafted ZIP file with a long filename, affecting multiple applications using the DynaZip library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2004-1094?
CVE-2004-1094 is a critical memory corruption vulnerability in Realnetworks Realplayer, published on 1 Dec 2004. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products. NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same.
Which versions are affected by CVE-2004-1094?
It affects 5 products.
Products include Checkmark Checkmark Payroll, Checkmark Multiledger, Innermedia Dynazip Library, Realnetworks Realone Player, Realnetworks Realplayer.
How do I fix CVE-2004-1094?
No fix has been published for CVE-2004-1094 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2004-1094 being exploited?
There is no known exploitation of CVE-2004-1094 in the wild and no public exploit code.
Sources
Also known as GHSA-wxrj-p544-pvhq.