CVE-2005-0611

2005-05-0204:00:00

redhat

web.nvd.nist.gov

cve-2005-0611

realnetworks

realplayer

buffer overflow

wav files

nvd

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.558

Percentile

97.7%

JSON

Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.

Affected configurations

Nvd

Node

realnetworkshelix_player

realnetworksrealone_playerMatch1.0

realnetworksrealone_playerMatch2.0

realnetworksrealplayerenterprise

realnetworksrealplayerMatch8.0

realnetworksrealplayerMatch10.0

realnetworksrealplayerMatch10.5

VendorProductVersionCPE
realnetworkshelix_player*cpe:2.3:a:realnetworks:helix_player:*:*:*:*:*:*:*:*
realnetworksrealone_player1.0cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*
realnetworksrealone_player2.0cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*
realnetworksrealplayer*cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:*
realnetworksrealplayer8.0cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*
realnetworksrealplayer10.0cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*
realnetworksrealplayer10.5cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realnetworks	helix_player	*	cpe:2.3:a:realnetworks:helix_player::::::::
realnetworks	realone_player	1.0	cpe:2.3:a:realnetworks:realone_player:1.0:::::::*
realnetworks	realone_player	2.0	cpe:2.3:a:realnetworks:realone_player:2.0:::::::*
realnetworks	realplayer	*	cpe:2.3:a:realnetworks:realplayer:::enterprise:::::*
realnetworks	realplayer	8.0	cpe:2.3:a:realnetworks:realplayer:8.0:::::::*
realnetworks	realplayer	10.0	cpe:2.3:a:realnetworks:realplayer:10.0:::::::*
realnetworks	realplayer	10.5	cpe:2.3:a:realnetworks:realplayer:10.5:::::::*