Vulnerability Description
Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Realnetworks | Helix Player | All versions |
| Realnetworks | Realone Player | 1.0 |
| Realnetworks | Realplayer | All versions |
References
- http://marc.info/?l=bugtraq&m=110979465912834&w=2
- http://marc.info/?l=vulnwatch&m=110977858619314&w=2
- http://service.real.com/help/faq/security/050224_player/EN/
- http://www.redhat.com/support/errata/RHSA-2005-265.html
- http://www.redhat.com/support/errata/RHSA-2005-271.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://marc.info/?l=bugtraq&m=110979465912834&w=2
- http://marc.info/?l=vulnwatch&m=110977858619314&w=2
- http://service.real.com/help/faq/security/050224_player/EN/
- http://www.redhat.com/support/errata/RHSA-2005-265.html
- http://www.redhat.com/support/errata/RHSA-2005-271.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
FAQ
What is CVE-2005-0611?
CVE-2005-0611 is a vulnerability with a CVSS score of 5.1 (MEDIUM). Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.
How severe is CVE-2005-0611?
CVE-2005-0611 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-0611?
Check the references section above for vendor advisories and patch information. Affected products include: Realnetworks Helix Player, Realnetworks Realone Player, Realnetworks Realplayer.