Vulnerability Details CVE-2005-0455
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.754
EPSS Ranking 98.8%
CVSS Severity
CVSS v2 Score 5.1
Products affected by CVE-2005-0455
-
cpe:2.3:a:realnetworks:realone_player:1.0
-
cpe:2.3:a:realnetworks:realone_player:2.0
-
cpe:2.3:a:realnetworks:realplayer:10.0
-
cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690
-
cpe:2.3:a:realnetworks:realplayer:10.0_beta
-
cpe:2.3:a:realnetworks:realplayer:10.5
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053
-
cpe:2.3:a:realnetworks:realplayer:8.0