Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2005-2710
HistorySep 27, 2005 - 8:03 p.m.

CVE-2005-2710

2005-09-2720:03:00
mitre
web.nvd.nist.gov
35
cve-2005-2710
real helixplayer
realplayer 10
format string vulnerability
remote code execution
realpix
realtext

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.968

Percentile

99.7%

JSON

Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.

Affected configurations

Nvd
Node
realnetworkshelix_player
OR
realnetworksrealplayerMatch10.0
VendorProductVersionCPE
realnetworkshelix_player*cpe:2.3:a:realnetworks:helix_player:*:*:*:*:*:*:*:*
realnetworksrealplayer10.0cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*

References

Related

nessus 8
cert 1
exploitdb 1
gentoo 1
securityvulns 1
openvas 4
cvelist 1
nvd 1
suse 1
checkpoint_advisories 1
osv 1
debian 2
centos 1
redhat 2
nessus
nessus
Fedora Core 4 : HelixPlayer-1.0.6-1.fc4.2 (2005-940)
2005-10-05 00:00:00
GLSA-200510-07 : RealPlayer, Helix Player: Format string vulnerability
2005-10-11 00:00:00
SUSE-SA:2005:059: RealPlayer
2005-10-11 00:00:00
cert
cert
Helix Player format string vulnerability
2005-09-28 00:00:00
exploitdb
exploitdb
RealPlayer/Helix Player (Linux) - Remote Format String
2005-09-26 00:00:00
gentoo
gentoo
RealPlayer, Helix Player: Format string vulnerability
2005-10-07 00:00:00
securityvulns
securityvulns
[Full-disclosure] iDEFENSE Security Advisory 09.30.05: RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability
2005-09-30 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200510-07 (realplayer helixplayer)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200510-07 (realplayer helixplayer)
2008-09-24 00:00:00
Debian Security Advisory DSA 826-1 (helix-player)
2008-01-17 00:00:00
cvelist
cvelist
CVE-2005-2710
2005-09-27 04:00:00
nvd
nvd
CVE-2005-2710
2005-09-27 20:03:00
suse
suse
remote code execution in RealPlayer
2005-10-10 13:36:54
checkpoint_advisories
checkpoint_advisories
RealNetworks RealPlayer Error Message Format String (CVE-2005-2710)
2009-10-11 00:00:00
osv
osv
helix-player - multiple
2005-09-29 00:00:00
debian
debian
[SECURITY] [DSA 826-1] New helix-player packages fix multiple vulnerabilities
2005-09-29 23:56:37
[SECURITY] [DSA 826-1] New helix-player packages fix multiple vulnerabilities
2005-09-29 23:56:37
centos
centos
HelixPlayer security update
2005-09-27 22:04:42
redhat
redhat
(RHSA-2005:762) RealPlayer security update
2005-09-27 00:00:00
(RHSA-2005:788) HelixPlayer security update
2005-09-27 00:00:00

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.968

Percentile

99.7%

JSON
Related for CVE-2005-2710
nessus8cert1exploitdb1gentoo1securityvulns1openvas4cvelist1nvd1suse1checkpoint_advisories1osv1debian2centos1redhat2