VulnerabilityModified

CVE-2005-2630

Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.

MEDIUM 5.1EPSS 4.48%

Does this matter?

Lower severity and a low EPSS score (4.48%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS: 4.48% probability · 91th percentile
CISA KEV: Not listed
Affected: realnetworks/realone player · realnetworks/realplayer
Source: cve@mitre.org

References

http://marc.info/?l=bugtraq&m=113166519206033&w=2
http://secunia.com/advisories/17514/Patch, Vendor Advisory
http://secunia.com/advisories/17860
http://securityreason.com/securityalert/170
http://securitytracker.com/id?1015184
http://securitytracker.com/id?1015185
http://service.real.com/help/faq/security/051110_player/EN/Patch
http://www.eeye.com/html/research/advisories/AD20051110b.htmlPatch, Vendor Advisory
http://www.osvdb.org/18827
http://www.securityfocus.com/bid/15382
https://exchange.xforce.ibmcloud.com/vulnerabilities/23025
http://marc.info/?l=bugtraq&m=113166519206033&w=2
http://secunia.com/advisories/17514/Patch, Vendor Advisory
http://secunia.com/advisories/17860
http://securityreason.com/securityalert/170
http://securitytracker.com/id?1015184
http://securitytracker.com/id?1015185
http://service.real.com/help/faq/security/051110_player/EN/Patch
http://www.eeye.com/html/research/advisories/AD20051110b.htmlPatch, Vendor Advisory
http://www.osvdb.org/18827
http://www.securityfocus.com/bid/15382
https://exchange.xforce.ibmcloud.com/vulnerabilities/23025

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.