CVE-2005-2710
MEDIUM 5.1EPSS 13.2%
Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.
- CVSS v2.0 NVD
- 5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P - EPSS
- 13.18% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2005-09-27
- Updated
- 2024-08-07
Proof-of-concept exploits (1)
ExploitDB entries (1)
Security advisories
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168078
- http://www.debian.org/security/2005/dsa-826
- http://www.idefense.com/application/poi/display?id=311&type=vulnerabilities
- http://www.open-security.org/advisories/13
- http://www.redhat.com/support/errata/RHSA-2005-788.html
- http://www.kb.cert.org/vuls/id/361181
- http://www.redhat.com/support/errata/RHSA-2005-762.html