PT-2004-3656
CVE-2005-0192
·
Publicado
2004-10-06
·
Atualizado
2017-12-12
Descrição por
CVSS 2.0
2.6
BaixaMétricasAV:N/AC:H/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
RealPlayer versions prior to 10.5 (6.0.12.1040)
Description
A directory traversal issue exists in the parsing of Skin file names, allowing remote attackers to read arbitrary files by including a .. (dot dot) in an RJS filename.
Recommendations
For versions prior to 10.5 (6.0.12.1040), update to a version later than 10.5 (6.0.12.1040) to resolve the issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾