Lucene search
MitreCVE-2005-0455HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0455
2005-05-0204:00:00
mitre
web.nvd.nist.gov
32
cve-2005-0455
realnetworks
realplayer
buffer overflow
remote code execution
smlparse
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.463
Percentile
97.5%
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.
Affected configurations
Node
realnetworksrealone_playerMatch1.0
ORrealnetworksrealone_playerMatch2.0
ORrealnetworksrealplayerMatch8.0
ORrealnetworksrealplayerMatch8.0win32
ORrealnetworksrealplayerMatch10.0
ORrealnetworksrealplayerMatch10.0_6.0.12.690
ORrealnetworksrealplayerMatch10.0_beta
ORrealnetworksrealplayerMatch10.5
ORrealnetworksrealplayerMatch10.5_6.0.12.1016_beta
ORrealnetworksrealplayerMatch10.5_6.0.12.1040
ORrealnetworksrealplayerMatch10.5_6.0.12.1053
| Vendor | Product | Version | CPE |
|---|---|---|---|
| realnetworks | realone_player | 1.0 | cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:* |
| realnetworks | realone_player | 2.0 | cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:* |
| realnetworks | realplayer | 8.0 | cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:* |
| realnetworks | realplayer | 8.0 | cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:* |
| realnetworks | realplayer | 10.0 | cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:* |
| realnetworks | realplayer | 10.0_6.0.12.690 | cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:* |
| realnetworks | realplayer | 10.0_beta | cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:* |
| realnetworks | realplayer | 10.5 | cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:* |
| realnetworks | realplayer | 10.5_6.0.12.1016_beta | cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:* |
| realnetworks | realplayer | 10.5_6.0.12.1040 | cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:* |
References
Related
checkpoint_advisories
checkpoint_advisories
RealNetworks RealPlayer SMIL File Handling Buffer Overflow (CVE-2005-0455)
2009-11-29 00:00:00
cvelist
cvelist
CVE-2005-0455
2005-03-02 05:00:00
securityvulns
securityvulns
exploitdb
exploitdb
RealNetworks RealPlayer 10 - '.smil' Local Buffer Overflow
2005-03-07 00:00:00
metasploit
metasploit
RealNetworks RealPlayer SMIL Buffer Overflow
2007-02-03 13:10:31
packetstorm
packetstorm
RealNetworks RealPlayer SMIL Buffer Overflow
2009-11-26 00:00:00
nvd
nvd
CVE-2005-0455
2005-05-02 04:00:00
nessus
nessus
SUSE-SA:2005:014: RealPlayer
2005-03-09 00:00:00
RHEL 4 : HelixPlayer (RHSA-2005:271)
2005-03-04 00:00:00
RealPlayer Multiple Remote Overflows (2005-03-01)
2005-03-02 00:00:00
suse
suse
remote code execution in RealPlayer
2005-03-09 14:32:31
redhat
redhat
(RHSA-2005:271) HelixPlayer security update
2005-03-03 00:00:00
(RHSA-2005:265) RealPlayer security update
2005-03-03 00:00:00
(RHSA-2005:299) realplayer security update
2005-03-21 00:00:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.463
Percentile
97.5%
Related for CVE-2005-0455