CVE-2005-0192: Low severity realnetworks realone player vulnerability
Published Oct 6, 2004
·Updated
Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.
Affected Software
7 affected components
RealNetworks RealOne Player=2.0
RealNetworks RealOne Player=1.0
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.0-beta
Event History
Oct 6, 2004
CVE Published
04:00 AM
Feb 6, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0192?
CVE-2005-0192 is classified as a medium severity vulnerability due to its ability to allow unauthorized file access.
2
How do I fix CVE-2005-0192?
To fix CVE-2005-0192, upgrade to a version of RealPlayer that is later than 10.5.
3
What software is affected by CVE-2005-0192?
CVE-2005-0192 affects RealPlayer versions 10.5 and earlier, as well as specific versions of RealOne Player.
4
Can CVE-2005-0192 be exploited remotely?
Yes, CVE-2005-0192 can be exploited remotely, allowing attackers to read arbitrary files on the server.
5
What type of vulnerability is CVE-2005-0192?
CVE-2005-0192 is a directory traversal vulnerability related to the parsing of Skin file names.