First published: Wed Jun 29 2005(Updated: )
RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers".
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
RealPlayer | =10.0 | |
RealNetworks RealPlayer | =2.0 | |
RealPlayer | =8.0 | |
RealPlayer | =10.5_6.0.12.1040_1069 | |
RealNetworks RealPlayer | =1.0 | |
RealPlayer |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-2055 is considered a moderate severity vulnerability due to its potential for remote exploitation.
To fix CVE-2005-2055, update to the latest version of RealPlayer or RealOne Player that addresses this vulnerability.
CVE-2005-2055 affects RealPlayer versions 8, 10, and 10.5, as well as RealOne Player versions 1 and 2.
The attack vector for CVE-2005-2055 involves a remote malicious web server that can create an arbitrary HTML file to exploit the vulnerability.
Yes, CVE-2005-2055 is particularly relevant due to the default settings of earlier Internet Explorer browsers that contribute to its exploitation.