PT-2005-3785 · Realnetworks · Realplayer+1

Published 2005-11-18 · Updated 2011-05-19 · CVE-2005-2936

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealPlayer versions 6.0.12.1040 through 6.0.12.1348 RealPlayer 10 RealOne Player v2 RealOne Player v1 RealPlayer 8 before 20060322

Description The issue allows local users to potentially gain privileges through a malicious file.

Recommendations For RealPlayer versions 6.0.12.1040 through 6.0.12.1348, update to a version outside of this range. For RealPlayer 10, consider upgrading to a newer version. For RealOne Player v2 and RealOne Player v1, upgrade to a newer version of the player. For RealPlayer 8, update to a version released after 20060322. As a temporary workaround, consider restricting the execution of files from untrusted locations to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2005-2936

Affected Products

Realone Player

Realplayer

References · 8

• http://secunia.com/advisories/19358 · Vendor Advisory
• http://vupen.com/english/advisories/2006/1057 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2936 · Security Note
• http://idefense.com/application/poi/display?id=340&type=vulnerabilities · Vendor Advisory
• http://securityfocus.com/bid/15448 · Note
• http://securitytracker.com/id?1015223 · Note
• http://service.real.com/help/faq/security/security111605.html · Note
• http://service.real.com/realplayer/security/03162006_player/en · Note