CVE-2005-4130

** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be MERGED with CVE-2005-4126. The information regarding this issue is extremely vague and does not provide any verifiable information. It has been posted by a reliable reporter with a prerelease disclosure policy. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.eeye.com/html/research/upcoming/20051116.html	Vendor Advisory
http://www.eeye.com/html/research/upcoming/20051116.html	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:03

Type	Values Removed	Values Added
References	~~() http://www.eeye.com/html/research/upcoming/20051116.html - Vendor Advisory~~	() http://www.eeye.com/html/research/upcoming/20051116.html - Vendor Advisory

Information

Published : 2005-12-09 11:03

Updated : 2024-11-21 00:03

NVD link : CVE-2005-4130

Mitre link : CVE-2005-4130

CVE.ORG link : CVE-2005-4130

JSON object : View

Products Affected

realnetworks

realplayer

CWE

NVD-CWE-Other

{"id": "CVE-2005-4130", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-12-09T11:03:00.000", "references": [{"url": "http://www.eeye.com/html/research/upcoming/20051116.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.eeye.com/html/research/upcoming/20051116.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be MERGED with CVE-2005-4126. The information regarding this issue is extremely vague and does not provide any verifiable information. It has been posted by a reliable reporter with a prerelease disclosure policy. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED."}], "lastModified": "2024-11-21T00:03:30.770", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCA29F41-A723-435D-AA35-EE03280B58C8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}