CVE-2005-0190

CVE-2005-0190 describes a directory traversal vulnerability in RealPlayer 10.5 and earlier versions. This flaw allows remote attackers to delete arbitrary files by crafting a malicious Real Metadata Package (RMP) file. The attack involves using ".." sequences in the FILENAME tag, followed by a question mark and an allowed file extension, which bypasses RealPlayer's extension validation. The vulnerability has a CVSS score of 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N), indicating a network-based attack with high access complexity, requiring no authentication, and primarily impacting integrity (file deletion). While the potential impact is limited to file deletion, the high access complexity reduces its immediate threat. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or concern.