CVE-2005-2052

2005-06-2804:00:00

[email protected]

web.nvd.nist.gov

cve-2005-2052

realplayer

buffer overflow

vidplin.dll

remote code execution

nvd

8.1 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.392 Low

EPSS

Percentile

97.3%

JSON

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 (6.0.12.1040 through 1069), RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value.

Affected configurations

NVD

Node

realnetworksrealone_playerMatch1.0

realnetworksrealone_playerMatch2.0

realnetworksrealplayerenterprise

realnetworksrealplayerMatch8.0

realnetworksrealplayerMatch10.0

realnetworksrealplayerMatch10.5_6.0.12.1040

realnetworksrealplayerMatch10.5_6.0.12.1069

CPENameOperatorVersion
realnetworks:realone_playerrealnetworks realone playereq1.0
realnetworks:realone_playerrealnetworks realone playereq2.0
realnetworks:realplayerrealnetworks realplayereq*
realnetworks:realplayerrealnetworks realplayereq8.0
realnetworks:realplayerrealnetworks realplayereq10.0
realnetworks:realplayerrealnetworks realplayereq10.5_6.0.12.1040
realnetworks:realplayerrealnetworks realplayereq10.5_6.0.12.1069

CPE	Name	Operator	Version
realnetworks:realone_player	realnetworks realone player	eq	1.0
realnetworks:realone_player	realnetworks realone player	eq	2.0
realnetworks:realplayer	realnetworks realplayer	eq	*
realnetworks:realplayer	realnetworks realplayer	eq	8.0
realnetworks:realplayer	realnetworks realplayer	eq	10.0
realnetworks:realplayer	realnetworks realplayer	eq	10.5_6.0.12.1040
realnetworks:realplayer	realnetworks realplayer	eq	10.5_6.0.12.1069