PT-2005-3785 · Realnetworks · Realplayer+1

Publicado 2005-11-18 · Atualizado 2011-05-19 · CVE-2005-2936

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions 6.0.12.1040 through 6.0.12.1348 RealPlayer 10 RealOne Player v2 RealOne Player v1 RealPlayer 8 before 20060322

Description The issue allows local users to potentially gain privileges through a malicious file.

Recommendations For RealPlayer versions 6.0.12.1040 through 6.0.12.1348, update to a version outside of this range. For RealPlayer 10, consider upgrading to a newer version. For RealOne Player v2 and RealOne Player v1, upgrade to a newer version of the player. For RealPlayer 8, update to a version released after 20060322. As a temporary workaround, consider restricting the execution of files from untrusted locations to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2005-2936

Produtos afetados

Realone Player

Realplayer

Referências · 8

• http://securityfocus.com/bid/15448 · Nota
• http://securitytracker.com/id?1015223 · Nota
• http://secunia.com/advisories/19358 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1057 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2936 · Nota de Segurança
• http://service.real.com/help/faq/security/security111605.html · Nota
• http://service.real.com/realplayer/security/03162006_player/en · Nota
• http://idefense.com/application/poi/display?id=340&type=vulnerabilities · Aviso do Fabricante