Vulnerability in Realnetworks Realone_player

CVE-2005-2054

Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file.

EPSS: 0.015 (72.3th percentile) — read the EPSS interpretation.

Affected products

Realnetworks Realone_player — versions 1.0, 2.0
Realnetworks Realplayer — versions 10.0, 10.5_6.0.12.1040_1069
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)