CVE

Id
11396  
CVE No.
CVE-2005-0190  
Status
Candidate  
Description
Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension.  
Phase
Assigned (20050128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
81052 11396 CVE-2005-0190 BUGTRAQ:20041006 Patch available for multiple high risk vulnerabilities in RealPlayer  View
81053 11396 CVE-2005-0190 URL:http://marc.info/?l=bugtraq&m=109707741022291&w=2  View
81054 11396 CVE-2005-0190 BUGTRAQ:20050119 RealPlayer Arbitrary File Deletion Vulnerability (#NISR19012005f)  View
81055 11396 CVE-2005-0190 URL:http://marc.info/?l=bugtraq&m=110616160228843&w=2  View
81056 11396 CVE-2005-0190 MISC:http://www.ngssoftware.com/advisories/real-02full.txt  View
81057 11396 CVE-2005-0190 CONFIRM:http://service.real.com/help/faq/security/040928_player/EN/  View
81058 11396 CVE-2005-0190 BID:11308  View
81059 11396 CVE-2005-0190 URL:http://www.securityfocus.com/bid/11308  View
81060 11396 CVE-2005-0190 SECUNIA:12672  View
81061 11396 CVE-2005-0190 URL:http://secunia.com/advisories/12672/  View
81062 11396 CVE-2005-0190 XF:realplayer-media-file-deletion(17551)  View

Related JVN