CVE-2005-0191

Опубликовано: 19 янв. 2005

Источник: nvd

CVSS2: 5.1

EPSS Низкий

Описание

Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag.

Ссылки

http://marc.info/?l=bugtraq&m=109707741022291&w=2
Third Party Advisory
http://marc.info/?l=bugtraq&m=110616302008401&w=2
Third Party Advisory
http://service.real.com/help/faq/security/040928_player/EN/
Patch
Vendor Advisory
http://www.ngssoftware.com/advisories/real-03full.txt
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18982
Third Party Advisory
VDB Entry
http://marc.info/?l=bugtraq&m=109707741022291&w=2
Third Party Advisory
http://marc.info/?l=bugtraq&m=110616302008401&w=2
Third Party Advisory
http://service.real.com/help/faq/security/040928_player/EN/
Patch
Vendor Advisory
http://www.ngssoftware.com/advisories/real-03full.txt
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18982
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.0:*:de:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06588

Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0191

redhat

почти 21 год назад

GHSA-cmg3-7h79-mcrf

github

больше 3 лет назад