Login Request a demo
Unscored severity · published Sep 27, 2005
CVE-2005-2710
Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a…
–
CVSS
13.2%
EPSS
No
On KEV
Description
Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HP
Helix Player · Realnetworks
All versions, or not specified · source: NVD
RE
Realplayer · Realnetworks
10.0 · source: NVD
Affected product
HP
Helix Player
Realnetworks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2710
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2710
Vendor Advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168078
marc.info
http://marc.info/?l=bugtraq&m=112785544325326&w=2
marc.info
http://marc.info/?l=full-disclosure&m=112775929608219&w=2
secunia.com
http://secunia.com/advisories/16954
secunia.com
http://secunia.com/advisories/16961
secunia.com
http://secunia.com/advisories/16981
More from Helix Player
–
CVE-2010-0417
Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute…
–
CVE-2010-0416
Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to…
–
CVE-2009-4257
Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0…
–
CVE-2009-4248
Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through…
–
CVE-2009-4247
Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.x; RealPlayer SP 1.0.0…