cbcvebase.
CVE-2005-0190
published 2004-09-29

CVE-2005-0190: Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages…

PriorityP423low2.6CVSS 2.0
AVNACHAuNCNIPAN
EPSS
4.05%
89.4th percentile
Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension.

Affected

8 ranges
VendorProductVersion rangeFixed in
realnetworksrealone_player——
realnetworksrealone_player——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
realnetworksrealplayer——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.