vulnwire
5.1med

CVE-2005-04553 exploits

Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
5.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
54.0%
percentile 99%
Public exploits
3
Metasploit · Exploit-DB

Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.

Exploit prediction (EPSS)

53.99% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • Metasploit exploit/windows/browser/realplayer_smil RealNetworks RealPlayer SMIL Buffer Overflow · metasploit exploit, normal rank · 2005-03-01
  • EDB-863 RealNetworks RealPlayer 10 - '.smil' Local Buffer Overflow · local · 2005-03-07
  • EDB-16586 RealNetworks RealPlayer - '.SMIL' Remote Buffer Overflow (Metasploit) · remote · 2010-05-09

CVSS scores

Assigned byVersionScoreVector
NVD2.05.1AV:N/AC:H/Au:N/C:P/I:P/A:P

References

  • idefense.com /application/poi/display?id=209&type=vulnerabilities · third-party-advisory, x_refsource_IDEFENSE, x_transferred
  • service.real.com /help/faq/security/050224_player · x_refsource_CONFIRM, x_transferred
  • redhat.com /support/errata/RHSA-2005-271.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • redhat.com /support/errata/RHSA-2005-265.html · vendor-advisory, x_refsource_REDHAT, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.