CVSS: 5.1EPSS: 46%CPEs: 11EXPL: 2CVE-2005-0455 – RealNetworks RealPlayer 10 - '.smil' Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2005-0455
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value. • https://www.exploit-db.com/exploits/863 https://www.exploit-db.com/exploits/16586 http://service.real.com/help/faq/security/050224_player http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities http://www.redhat.com/support/errata/RHSA-2005-265.html http://www.redhat.com/support/errata/RHSA-2005-271.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926 https://access.redhat.com/security/cve/CVE-2005-0455 https:/ •
CVSS: 5.1EPSS: 4%CPEs: 10EXPL: 0CVE-2005-0191
https://notcve.org/view.php?id=CVE-2005-0191
Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag. • http://marc.info/?l=bugtraq&m=109707741022291&w=2 http://marc.info/?l=bugtraq&m=110616302008401&w=2 http://service.real.com/help/faq/security/040928_player/EN http://www.ngssoftware.com/advisories/real-03full.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/18982 https://access.redhat.com/security/cve/CVE-2005-0191 https://bugzilla.redhat.com/show_bug.cgi?id=1617487 •
CVSS: 5.1EPSS: 26%CPEs: 20EXPL: 0CVE-2004-1481
https://notcve.org/view.php?id=CVE-2004-1481
Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow. • http://marc.info/?l=ntbugtraq&m=109708374115061&w=2 http://secunia.com/advisories/12672 http://www.securityfocus.com/bid/11309 http://www.service.real.com/help/faq/security/040928_player/EN https://exchange.xforce.ibmcloud.com/vulnerabilities/17549 •
CVSS: 5.1EPSS: 0%CPEs: 10EXPL: 3CVE-2004-1798
https://notcve.org/view.php?id=CVE-2004-1798
RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726. • http://secunia.com/advisories/9584 http://securitytracker.com/id?1008647 http://www.osvdb.org/3826 http://www.securityfocus.com/archive/1/349086 http://www.securityfocus.com/bid/9378 https://exchange.xforce.ibmcloud.com/vulnerabilities/14168 •
CVSS: 10.0EPSS: 74%CPEs: 24EXPL: 0CVE-2004-1094
https://notcve.org/view.php?id=CVE-2004-1094
Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products. NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same. Desbordamiento de búfer en el archivo InnerMedia DynaZip DUNZIP32.dll versión 5.00.03 y anteriores permite a atacantes ejecutar código de su elección mediante un fichero ZIP con un nombre de fichero largo, como se a demostrado usando (1) un fichero .rjs (piel) en RealPlayer 10 a 10.5 (6.0.12.1053) y RealOne Player 1 y 2, (2) la función función Restore Backup en CheckMark Software Payroll 2004/2005 3.9.6 y anteriores, (3) CheckMark MultiLedger anetrior a 7.0.2, (4) dtSearch 6.x y 7.x, (5) mcupdmgr.exe y mghtml.exe en McAfee VirusScan 10 construcción 10.0.21 y anteriores, y otros productos. NOTA: No está claro si esta es la misma vulnerabilidad que CVE-2004-0575, aunque la manipulación de datos es la misma. • http://archives.neohapsis.com/archives/fulldisclosure/2004-10/1044.html http://marc.info/?l=bugtraq&m=109894226007607&w=2 http://secunia.com/advisories/17096 http://secunia.com/advisories/17394 http://secunia.com/advisories/18194 http://secunia.com/advisories/19451 http://securityreason.com/securityalert/296 http://securityreason.com/securityalert/653 http://securitytracker.com/id?1011944 http://securitytracker.com/id?1012297 http://securitytracker.com/id?1016817 http://service.real. •