CVE-2005-2055

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-06-29 · updated 2026-06-16

Description

RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers".

Affected products

RealNetworks Realone Player: 1.0, 2.0
RealNetworks Realplayer: 8.0, 10.0, 10.5_6.0.12.1040_1069

References

http://service.real.com/help/faq/security/050623_player/EN/
http://service.real.com/help/faq/security/050623_player/EN/

Get alerted when CVE-2005-2055 or the next vulnerability affects your stack