CVE-2005-0189

RealPlayer 10.5 (6.0.12.1040) and earlier - Remote Code Execution via Long ShowPreferences Argument

Title source: llm

Description

Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.

References (6)

Core 6

Core References

Patch, Vendor Advisory mailing-list x_refsource_ntbugtraq

http://archives.neohapsis.com/archives/ntbugtraq/2005-q1/0046.html

Third Party Advisory mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=110616636318261&w=2

Patch, Third Party Advisory, VDB Entry, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/12311

Patch, Vendor Advisory x_refsource_misc

http://service.real.com/help/faq/security/040928_player/EN/

Third Party Advisory mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=109707741022291&w=2

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/698390

Scores

EPSS 0.2223

EPSS Percentile 95.9%

Details

Status published

Products (8)

realnetworks/realone_player 1.0

realnetworks/realone_player 2.0

realnetworks/realplayer 10.0 (3 CPE variants)

realnetworks/realplayer 10.0_6.0.12.690

realnetworks/realplayer 10.0_beta

realnetworks/realplayer 10.5

realnetworks/realplayer 10.5_6.0.12.1016_beta

realnetworks/realplayer 10.5_6.0.12.1040

Published Oct 06, 2004

Tracked Since Feb 18, 2026