PT-2005-1657
CVE-2005-0611
·
Publicado
2005-03-02
·
Atualizado
2017-10-11
Descrição por
CVSS 2.0
5.1
MédiaMétricasAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
RealPlayer versions 10.5 (6.0.12.1056 and earlier), 10, 8
RealOne Player versions V2 and V1
Description
A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via .WAV files.
Recommendations
For RealPlayer versions 10.5 (6.0.12.1056 and earlier), 10, 8, update to a version later than 6.0.12.1056 to resolve the issue.
For RealOne Player versions V2 and V1, update to a version later than V2 to resolve the issue.
As a temporary workaround, consider avoiding the use of .WAV files with the affected RealPlayer and RealOne Player versions until a patch is available.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾