PT-2005-1657
CVE-2005-0611
·
تاريخ النشر
2005-03-02
·
تاريخ التحديث
2017-10-11
الوصف من
CVSS 2.0
5.1
متوسطةالمقاييسAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
RealPlayer versions 10.5 (6.0.12.1056 and earlier), 10, 8
RealOne Player versions V2 and V1
Description
A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via .WAV files.
Recommendations
For RealPlayer versions 10.5 (6.0.12.1056 and earlier), 10, 8, update to a version later than 6.0.12.1056 to resolve the issue.
For RealOne Player versions V2 and V1, update to a version later than V2 to resolve the issue.
As a temporary workaround, consider avoiding the use of .WAV files with the affected RealPlayer and RealOne Player versions until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾