VDB
CVE-2005-0755
CVE-2005-0755
PUBLISHED
CVSS 5.099999904632568 MEDIUM
Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.
EPSS 3.37% · 88.7th percentile
Risk Scores
CVSS 2.0
5.099999904632568
EPSS Score
3.37%
88.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| realnetworks | realone_player | 2.0, 1.0 |
| realnetworks | realplayer | 8.0, 8.0, 10.0 |
| realnetworks | helix_player | 0 |
| n/a | n/a | * |
Timeline
- Apr 19, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
References
- RHSA-2005:392 vendor-advisory
- RHSA-2005:363 vendor-advisory
- 20050420 RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Overflow mailing-list
- oval:org.mitre.oval:def:11205 vdb
- http://pb.specialised.info/all/adv/real-ram-adv.txt url
- https://nvd.nist.gov/vuln/detail/CVE-2005-0755 advisory
- http://service.real.com/help/faq/security/050419_player/EN url
- http://service.real.com/help/faq/security/050419_player/EN/ advisory
- http://www.redhat.com/support/errata/RHSA-2005-394.html advisory
- http://www.redhat.com/archives/fedora-announce-list/2005-April/msg00040.html advisory