First published: Wed Oct 06 2004(Updated: )
Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
RealNetworks RealPlayer | =2.0 | |
RealNetworks RealPlayer | =1.0 | |
RealPlayer | =10.5 | |
RealPlayer | =10.0 | |
RealPlayer | =10.0 | |
RealPlayer | =10.0 | |
RealPlayer | =10.0-beta |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0192 is classified as a medium severity vulnerability due to its ability to allow unauthorized file access.
To fix CVE-2005-0192, upgrade to a version of RealPlayer that is later than 10.5.
CVE-2005-0192 affects RealPlayer versions 10.5 and earlier, as well as specific versions of RealOne Player.
Yes, CVE-2005-0192 can be exploited remotely, allowing attackers to read arbitrary files on the server.
CVE-2005-0192 is a directory traversal vulnerability related to the parsing of Skin file names.