CVE

Id
12972  
CVE No.
CVE-2005-1766  
Status
Candidate  
Description
Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file.  
Phase
Assigned (20050531)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
93431 12972 CVE-2005-1766 IDEFENSE:20050623 RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability  View
93432 12972 CVE-2005-1766 URL:http://www.idefense.com/application/poi/display?id=250&type=vulnerabilities&flashstatus=true  View
93433 12972 CVE-2005-1766 CONFIRM:http://service.real.com/help/faq/security/050623_player/EN/  View
93434 12972 CVE-2005-1766 DEBIAN:DSA-826  View
93435 12972 CVE-2005-1766 URL:http://www.debian.org/security/2005/dsa-826  View
93436 12972 CVE-2005-1766 REDHAT:RHSA-2005:523  View
93437 12972 CVE-2005-1766 URL:http://www.redhat.com/support/errata/RHSA-2005-523.html  View
93438 12972 CVE-2005-1766 REDHAT:RHSA-2005:517  View
93439 12972 CVE-2005-1766 URL:http://www.redhat.com/support/errata/RHSA-2005-517.html  View
93440 12972 CVE-2005-1766 SUSE:SUSE-SA:2005:037  View
93441 12972 CVE-2005-1766 URL:http://www.novell.com/linux/security/advisories/2005_37_real_player.html  View
93442 12972 CVE-2005-1766 OVAL:oval:org.mitre.oval:def:9509  View
93443 12972 CVE-2005-1766 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9509  View
93444 12972 CVE-2005-1766 SECUNIA:16981  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62218 JVNDB-2005-000420 Linux Kernel の execve() 関数における競合状態の脆弱性 Itanium (ia64) および AMD64 アーキテクチャにおける Linux Kernel には、execve() 関数のシステムコールのための互換コードに競合状態が発生する不備のため、特定の引数がユーザ空間からカーネル空間に引き渡される際に、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-1768 12972 3.7 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000420.html  View