medium5.1Public exploit code
CVE-2005-0455
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RealNetworks RealPlayer - '.SMIL' Remote Buffer Overflow (Metasploit)2010-05-09 · remote · windows · Verified
- RealNetworks RealPlayer 10 - '.smil' Local Buffer Overflow2005-03-07 · local · windows · Verified
Impact
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- http://service.real.com/help/faq/security/050224_player
- http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities
- http://www.redhat.com/support/errata/RHSA-2005-265.html
- http://www.redhat.com/support/errata/RHSA-2005-271.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926
- http://service.real.com/help/faq/security/050224_player
- http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities
- http://www.redhat.com/support/errata/RHSA-2005-265.html
- http://www.redhat.com/support/errata/RHSA-2005-271.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926