PT-2004-3656
CVE-2005-0192
·
Published
2004-10-06
·
Updated
2017-12-12
Description by
CVSS 2.0
2.6
LowMetricsAV:N/AC:H/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
RealPlayer versions prior to 10.5 (6.0.12.1040)
Description
A directory traversal issue exists in the parsing of Skin file names, allowing remote attackers to read arbitrary files by including a .. (dot dot) in an RJS filename.
Recommendations
For versions prior to 10.5 (6.0.12.1040), update to a version later than 10.5 (6.0.12.1040) to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾