CVE-2005-2710: realnetworks realplayer
Vulnerability summary
CVE-2005-2710 is a medium (CVSS 5.1) vulnerability in realnetworks realplayer. EPSS estimates a 13.18% chance of exploitation in the next 30 days, higher than 96.3% of scored vulnerabilities. 1 public exploit is recorded.
Weaponized exploit (exploit-database, 26-09-2005)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2Timeline
- 27-09-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
13.18%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
No change 0.00 pp
From 13.18% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundRealPlayer/Helix Player (Linux) - Remote Format String
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Realnetworks1 product
- realplayer10.0
1 vendor · 1 product
References
19 links
Show all 19 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11015VDB EntrySignatureX Refsource OVAL
- www.idefense.com/application/poi/display?id=311&type=vulnerabilitiesThird Party AdvisoryX Refsource IDEFENSEVendor Advisory