CVE-2005-2055: Medium severity realnetworks realplayer vulnerability

Published Jun 28, 2005
·
Updated

RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers".

Affected Software

6 affected components
RealNetworks RealPlayer=10.0
RealNetworks RealOne Player=2.0
RealNetworks RealPlayer=8.0
RealNetworks RealPlayer=10.5_6.0.12.1040_1069
RealNetworks RealOne Player=1.0
RealNetworks RealPlayer

Event History

Jun 28, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2005-2055?

CVE-2005-2055 is considered a moderate severity vulnerability due to its potential for remote exploitation.

2

How do I fix CVE-2005-2055?

To fix CVE-2005-2055, update to the latest version of RealPlayer or RealOne Player that addresses this vulnerability.

3

What types of software are affected by CVE-2005-2055?

CVE-2005-2055 affects RealPlayer versions 8, 10, and 10.5, as well as RealOne Player versions 1 and 2.

4

What is the attack vector for CVE-2005-2055?

The attack vector for CVE-2005-2055 involves a remote malicious web server that can create an arbitrary HTML file to exploit the vulnerability.

5

Is CVE-2005-2055 related to older versions of Internet Explorer?

Yes, CVE-2005-2055 is particularly relevant due to the default settings of earlier Internet Explorer browsers that contribute to its exploitation.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203