CVE-2005-0755

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=111401615202987&w=2Third Party Advisory
http://pb.specialised.info/all/adv/real-ram-adv.txtThird Party Advisory
http://service.real.com/help/faq/security/050419_player/EN/Third Party Advisory
http://www.redhat.com/archives/fedora-announce-list/2005-April/msg00040.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-363.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-392.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-394.htmlThird Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11205Third Party Advisory
http://marc.info/?l=bugtraq&m=111401615202987&w=2Third Party Advisory
http://pb.specialised.info/all/adv/real-ram-adv.txtThird Party Advisory
http://service.real.com/help/faq/security/050419_player/EN/Third Party Advisory
http://www.redhat.com/archives/fedora-announce-list/2005-April/msg00040.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-363.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-392.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-394.htmlThird Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11205Third Party Advisory

Timeline

Published: Apr 19, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-07562.1ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of servi CVE-2005-07572.1The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which a CVE-2005-07584.6zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that a CVE-2005-07595.0ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag.CVE-2005-07605.0The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.CVE-2005-07615.0Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD CVE-2005-07627.5Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI i CVE-2005-07634.6Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code.CVE-2005-07647.5Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing lon CVE-2005-07655.0Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash).CVE-2005-07665.0Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (applica CVE-2005-07676.9Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root.