RealPlayer for Windows Multiple Overflows (2)

Medium Nessus Network Monitor Plugin ID 3286


The remote Windows application is affected by several overflow vulnerabilities.


The installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows on the remote host is prone to buffer overflow and heap overflow vulnerabilities. An attacker may be able to leverage these issues to execute arbitrary code on the remote host subject to the permissions of the user running the affected application. Note that a user doesn't necessarily need to explicitly access a malicious media file since the browser may automatically pass RealPlayer skin files (ie, files with the extension '.rjs') to the application.



See Also

Plugin Details

Severity: Medium

ID: 3286

Family: Web Clients

Published: 2005/11/11

Modified: 2016/01/21

Dependencies: 1735, 8314

Nessus ID: 20184

Risk Information

Risk Factor: Medium


Base Score: 5.4

Temporal Score: 4.2

Vector: CVSS2#AV:A/AC:M/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:POC/RL:OF/RC:C


Base Score: 5

Temporal Score: 4.5


Temporal Vector: CVSS3#E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:realnetworks:realplayer

Reference Information

CVE: CVE-2006-0323, CVE-2005-2922, CVE-2005-2939, CVE-2005-2940, CVE-2006-1370, CVE-2005-3677, CVE-2005-2936, CVE-2005-2630, CVE-2005-2629

BID: 15381, 15383, 15382, 15398, 15448, 17202