CVE-2005-0189: Buffer Overflow
Published Oct 6, 2004
·Updated
Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.
Affected Software
10 affected components
RealNetworks RealOne Player=1.0
RealNetworks RealOne Player=2.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.0_6.0.12.690
RealNetworks RealPlayer=10.0_beta
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=10.5_6.0.12.1016_beta
RealNetworks RealPlayer=10.5_6.0.12.1040
Remediation
Patch Available
Patch Available
Patch Available
Event History
Oct 6, 2004
CVE Published
04:00 AM
Feb 6, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0189?
CVE-2005-0189 is considered high severity due to the potential for remote code execution.
2
How do I fix CVE-2005-0189?
To fix CVE-2005-0189, update your RealPlayer to version 10.5 or later, which addresses the buffer overflow vulnerability.
3
Which versions of RealPlayer are affected by CVE-2005-0189?
CVE-2005-0189 affects RealPlayer versions 10.5 and earlier, including specific RealOne Player versions.
4
What type of vulnerability is CVE-2005-0189?
CVE-2005-0189 is a stack-based buffer overflow vulnerability.
5
Can CVE-2005-0189 be exploited remotely?
Yes, CVE-2005-0189 can be exploited remotely by sending a specially crafted argument to the HandleAction function.