CVE-1999-0896: realnetworks realserver_g2
Vulnerability summary
CVE-1999-0896 is a high (CVSS 10.0) vulnerability in realnetworks realserver_g2. EPSS estimates a 12.81% chance of exploitation in the next 30 days, higher than 96.2% of scored vulnerabilities. 2 public exploits are recorded.
Weaponized exploit (exploit-database, 04-11-1999)
Source freshness unavailable
How is this decided?Timeline
- 22-03-2000PublishedVulnerability first disclosed.
- 01-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
12.81%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
No change 0.00 pp
From 12.81% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
2 foundReal Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (1)
Maturity: weaponized
Real Networks GameHouse dldisplay ActiveX control - Port Buffer Overflow (2)
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Realnetworks1 product
1 vendor · 1 product
References
2 links- service.real.com/help/faq/servg260.htmlX Refsource MISC