low2.6
CVE-2005-0192
Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary file…
Impact
Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realnetworks | Realone Player | Versions 1.0, 2.0 |
| Realnetworks | Realplayer | Versions 10.0, 10.5 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109707741022291&w=2
- http://marc.info/?l=bugtraq&m=110616302008401&w=2
- http://service.real.com/help/faq/security/040928_player/EN/
- http://www.ngssoftware.com/advisories/real-03full.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18984
- http://marc.info/?l=bugtraq&m=109707741022291&w=2
- http://marc.info/?l=bugtraq&m=110616302008401&w=2
- http://service.real.com/help/faq/security/040928_player/EN/
- http://www.ngssoftware.com/advisories/real-03full.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18984