CVE-2005-0755

2005-04-1904:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-0755

realplayer

helix player

realone player

remote code execution

buffer overflow

security vulnerability

7.7 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.147 Low

EPSS

Percentile

95.7%

JSON

Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.

CPENameOperatorVersion
realnetworks:realplayerrealnetworks realplayereq10.0
realnetworks:realone_playerrealnetworks realone playereq2.0
realnetworks:realplayerrealnetworks realplayereq8.0
realnetworks:realone_playerrealnetworks realone playereq1.0
realnetworks:realplayerrealnetworks realplayereq10.0_6.0.12.690
realnetworks:helix_playerrealnetworks helix playerle10.0.3

CPE	Name	Operator	Version
realnetworks:realplayer	realnetworks realplayer	eq	10.0
realnetworks:realone_player	realnetworks realone player	eq	2.0
realnetworks:realplayer	realnetworks realplayer	eq	8.0
realnetworks:realone_player	realnetworks realone player	eq	1.0
realnetworks:realplayer	realnetworks realplayer	eq	10.0_6.0.12.690
realnetworks:helix_player	realnetworks helix player	le	10.0.3