Lucene search

K
nvd[email protected]NVD:CVE-2005-2630
HistoryNov 18, 2005 - 11:03 p.m.

CVE-2005-2630

2005-11-1823:03:00
web.nvd.nist.gov

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.74 High

EPSS

Percentile

98.1%

Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.

Affected configurations

NVD
Node
realnetworksrealone_playerMatch1.0
OR
realnetworksrealone_playerMatch2.0
OR
realnetworksrealplayerenterprise
OR
realnetworksrealplayerMatch8.0win32
OR
realnetworksrealplayerMatch10.0
OR
realnetworksrealplayerMatch10.0linux
OR
realnetworksrealplayerMatch10.0mac_os_x
OR
realnetworksrealplayerMatch10.5
OR
realnetworksrealplayerMatch10.5_6.0.12.1040
OR
realnetworksrealplayerMatch10.5_6.0.12.1053
OR
realnetworksrealplayerMatch10.5_6.0.12.1056
OR
realnetworksrealplayerMatch10.5_6.0.12.1059
OR
realnetworksrealplayerMatch10.5_6.0.12.1069
OR
realnetworksrealplayerMatch10.5_6.0.12.1235

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.74 High

EPSS

Percentile

98.1%