PT-2004-3656
CVE-2005-0192
·
تاريخ النشر
2004-10-06
·
تاريخ التحديث
2017-12-12
الوصف من
CVSS 2.0
2.6
منخفضةالمقاييسAV:N/AC:H/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
RealPlayer versions prior to 10.5 (6.0.12.1040)
Description
A directory traversal issue exists in the parsing of Skin file names, allowing remote attackers to read arbitrary files by including a .. (dot dot) in an RJS filename.
Recommendations
For versions prior to 10.5 (6.0.12.1040), update to a version later than 10.5 (6.0.12.1040) to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾