{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Mac RealPlayer 10 (10.0.0.305 - 331) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "RealPlayer 10 (10.0.0 - 5) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "RealPlayer 8 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "RealPlayer Enterprise 1.1, 1.2, 1.5, 1.6 et 1.7 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Helix Player (10.0.0 - 5).",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "RealOne Player v2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "RealPlayer 10 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "RealOne Player v1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "RealPlayer 10.5 (6.0.2.1040-1235) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDeux vuln\u00e9rabilit\u00e9s de type d\u00e9bordement de m\u00e9moire ont \u00e9t\u00e9 d\u00e9couvertes\ndans le traitement des fichiers au format .rjs (fichiers \u00ab skin \u00bb). Une\nde ces deux vuln\u00e9rabilit\u00e9s se trouve dans la biblioth\u00e8que de\ncompression/d\u00e9compression DUNZIP32.DLL. Un utilisateur mal intentionn\u00e9\npeut, par le biais d\u0027un fichier au format .rjs malicieusement constitu\u00e9,\nex\u00e9cuter du code arbitraire \u00e0 distance.\n\nUne vuln\u00e9rabilit\u00e9 dans le traitement des fichiers au format .rm\n(fichiers RealMedia) a \u00e9t\u00e9 d\u00e9couverte. Un utilisateur mal intentionn\u00e9\npeut, par le biais d\u0027un fichier au format .rm malicieusement constitu\u00e9,\nex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nAppliquer les mises \u00e0 jour de l\u0027\u00e9diteur (voir Documentation).\n",
  "cves": [],
  "initial_release_date": "2005-11-15T00:00:00",
  "last_revision_date": "2005-11-15T00:00:00",
  "links": [
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RealNetworks du 10 novembre 2005 :",
      "url": "http://service.real.com/help/faq/security/051110_player/FR/"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RealNetworks du 10 novembre 2005 :",
      "url": "http://service.real.com/help/faq/security/security111005.html"
    }
  ],
  "reference": "CERTA-2005-AVI-455",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-11-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Trois vuln\u00e9rabilit\u00e9s d\u00e9couvertes dans le lecteur RealPlayer permettent\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s du lecteur RealPlayer",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins de s\u00e9curit\u00e9 de RealNetworks du 10 novembre 2005",
      "url": null
    }
  ]
}