Directory traversal vulnerability in the parsing of Skin... · CVE-2005-0192 · GitHub Advisory Database · GitHub

Directory traversal vulnerability in the parsing of Skin...

Low severity Unreviewed Published May 1, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.

References

Published by the National Vulnerability Database

Oct 6, 2004

Published to the GitHub Advisory Database May 1, 2022

Last updated Jan 30, 2023