Exploitation Summary
EIP tracks 3 public exploits for CVE-2005-0455.
PoCs published by Metasploit, nolimit, including Metasploit module exploits/windows/browser/realplayer_smil.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in RealNetworks RealPlayer 10 and 8 via a malicious SMIL file. It triggers arbitrary code execution by overflowing a buffer in the 'system-screen-size' attribute of a SMIL file.
Description
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in RealNetworks RealPlayer 10 and 8 via a malicious SMIL file. It triggers arbitrary code execution by overflowing a buffer in the 'system-screen-size' attribute of a SMIL file.
This exploit targets a buffer overflow vulnerability in RealPlayer 10 via a maliciously crafted .smil file. It uses SEH overwrite techniques to achieve remote code execution, binding a shell on port 13579.
This Metasploit module exploits a stack buffer overflow in RealNetworks RealPlayer 10 and 8 via a malicious SMIL file. It leverages a crafted HTML response to trigger arbitrary code execution on vulnerable Windows systems.