CVE-2005-0455

Опубликовано: 02 мая 2005

Источник: nvd

CVSS2: 5.1

EPSS Высокий

Описание

Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.

Ссылки

http://service.real.com/help/faq/security/050224_player
Patch
Vendor Advisory
http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-265.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-271.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926
http://service.real.com/help/faq/security/050224_player
Patch
Vendor Advisory
http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-265.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-271.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.75424

Высокий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0455

redhat

больше 20 лет назад

GHSA-xc64-3j7c-vcc7

github

больше 3 лет назад