What is the severity of CVE-2005-0190?

CVE-2005-0190 is considered a critical vulnerability due to its potential for remote file deletion.

How do I fix CVE-2005-0190?

To fix CVE-2005-0190, update RealPlayer to the latest version that addresses this vulnerability.

Which versions of RealPlayer are affected by CVE-2005-0190?

CVE-2005-0190 affects RealPlayer versions 10.5 and earlier, including RealOne Player 1.0 and 2.0.

What kind of attack does CVE-2005-0190 allow?

CVE-2005-0190 allows remote attackers to exploit directory traversal to delete arbitrary files.

Is there a workaround for CVE-2005-0190?

A temporary workaround for CVE-2005-0190 is to restrict the use of RealPlayer or disable it until a patch is applied.

Vulnerability/
CVE-2005-0190

low

2.6

CWE

NVD-CWE-Other

29/9/2004

6/2/2005

7/8/2024

CVE-2005-0190

First published: Wed Sep 29 2004(Updated: )

Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
RealNetworks RealPlayer	=1.0
RealNetworks RealPlayer	=2.0
RealPlayer	=10.0
RealPlayer	=10.0
RealPlayer	=10.0
RealPlayer	=10.0_6.0.12.690
RealPlayer	=10.0_beta
RealPlayer	=10.5
RealPlayer	=10.5_6.0.12.1016_beta
RealPlayer	=10.5_6.0.12.1040

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2005-0190?
CVE-2005-0190 is considered a critical vulnerability due to its potential for remote file deletion.
How do I fix CVE-2005-0190?
To fix CVE-2005-0190, update RealPlayer to the latest version that addresses this vulnerability.
Which versions of RealPlayer are affected by CVE-2005-0190?
CVE-2005-0190 affects RealPlayer versions 10.5 and earlier, including RealOne Player 1.0 and 2.0.
What kind of attack does CVE-2005-0190 allow?
CVE-2005-0190 allows remote attackers to exploit directory traversal to delete arbitrary files.
Is there a workaround for CVE-2005-0190?
A temporary workaround for CVE-2005-0190 is to restrict the use of RealPlayer or disable it until a patch is applied.

agent/type
agent/remedy
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/weakness
agent/author
agent/last-modified-date
agent/severity
agent/references
agent/description
agent/event
agent/source
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-historical
vendor/realnetworks
product/realplayer
canonical/realnetworks realplayer
product/realone player
canonical/realnetworks realone player
version/realnetworks realplayer/1.0
version/realnetworks realplayer/2.0
canonical/realplayer
version/realplayer/10.0
version/realplayer/10.0_6.0.12.690
version/realplayer/10.0_beta
version/realplayer/10.5
version/realplayer/10.5_6.0.12.1016_beta
version/realplayer/10.5_6.0.12.1040

Frequently Asked Questions

What is the severity of CVE-2005-0190?
CVE-2005-0190 is considered a critical vulnerability due to its potential for remote file deletion.
How do I fix CVE-2005-0190?
To fix CVE-2005-0190, update RealPlayer to the latest version that addresses this vulnerability.
Which versions of RealPlayer are affected by CVE-2005-0190?
CVE-2005-0190 affects RealPlayer versions 10.5 and earlier, including RealOne Player 1.0 and 2.0.
What kind of attack does CVE-2005-0190 allow?
CVE-2005-0190 allows remote attackers to exploit directory traversal to delete arbitrary files.
Is there a workaround for CVE-2005-0190?
A temporary workaround for CVE-2005-0190 is to restrict the use of RealPlayer or disable it until a patch is applied.

CVE-2005-0190

Remedy

Remedy

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2005-0190?

How do I fix CVE-2005-0190?

Which versions of RealPlayer are affected by CVE-2005-0190?

What kind of attack does CVE-2005-0190 allow?

Is there a workaround for CVE-2005-0190?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2005-0190?

How do I fix CVE-2005-0190?

Which versions of RealPlayer are affected by CVE-2005-0190?

What kind of attack does CVE-2005-0190 allow?

Is there a workaround for CVE-2005-0190?