CVEvulnerability

CVE-2005-0189

7.5 HIGH Published 2004-10-06 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-10-06
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.

Affected configurations

• realnetworks realone player 1.0 • realnetworks realone player 2.0 • realnetworks realplayer 10.0 • realnetworks realplayer 10.0 6.0.12.690 • realnetworks realplayer 10.0 beta • realnetworks realplayer 10.5 • realnetworks realplayer 10.5 6.0.12.1016 beta • realnetworks realplayer 10.5 6.0.12.1040

References

http://archives.neohapsis.com/archives/ntbugtraq/2005-q1/0046.html Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=109707741022291&w=2 Third Party Advisory
http://marc.info/?l=bugtraq&m=110616636318261&w=2 Third Party Advisory
http://service.real.com/help/faq/security/040928_player/EN/ Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/698390 Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/12311 Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://archives.neohapsis.com/archives/ntbugtraq/2005-q1/0046.html Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=109707741022291&w=2 Third Party Advisory
http://marc.info/?l=bugtraq&m=110616636318261&w=2 Third Party Advisory
http://service.real.com/help/faq/security/040928_player/EN/ Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/698390 Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/12311 Patch, Third Party Advisory, VDB Entry, Vendor Advisory