CVE-2005-0455

CVE-2005-0455 is a medium-severity vulnerability with a CVSS 2.0 base score of 5.1. Its EPSS exploit-prediction score of 54% places it in the 99th percentile, indicating an elevated likelihood of exploitation.

Key facts

Description

Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.

Frequently asked questions

What is CVE-2005-0455?
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.
How severe is CVE-2005-0455?
CVE-2005-0455 has a CVSS 2.0 base score of 5.1, rated medium severity.
Is CVE-2005-0455 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 54% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2005-0455?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2005-0455 published?
CVE-2005-0455 was published on 2005-05-02 and last updated on 2026-06-16.

References