CVE-2005-0455 Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows rem...
MediumCVSS 5.1
EPSS 54.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.
Affected products
No affected product data has been published yet.
References
- service.real.com patch vendor-advisory
- 20050301 RealNetworks RealPlayer .smil Buffer Overflow Vulnerability patch third-party-advisory vendor-advisory
- RHSA-2005:265 patch vendor-advisory
- RHSA-2005:271 vendor-advisory
- oval:org.mitre.oval:def:10926 signature vdb-entry