CVEs-PoC/2005/CVE-2005-2710.md

CVE-2005-2710

Description

Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.

POC

Reference

• http://marc.info/?l=bugtraq&m=112785544325326&w=2
• http://marc.info/?l=full-disclosure&m=112775929608219&w=2
• http://securityreason.com/securityalert/27
• http://securityreason.com/securityalert/41

Github

• https://github.com/ARPSyndicate/cve-scores