Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2005-2710

28
FAUCET Score

CVE-2005-2710 is a format string vulnerability affecting Real HelixPlayer and RealPlayer 10, allowing remote attackers to execute arbitrary code through specially crafted RealPix or RealText files. With a CVSS score of 5.1, this vulnerability has a network-based attack vector and high access complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While not actively exploited in the wild, an exploit for Linux versions is publicly available on ExploitDB, though there is minimal community discussion or media coverage surrounding this older vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
All Versions ImpactedCPE matchmatch criteria
cpe:2.3:a:realnetworks:helix_player:*:*:*:*:*:*:*:*
10.0CPE matchmatch criteria
cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.1MEDIUM

AV:N/AC:H/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Exploitability Score
4.9
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
13.18%
Probability of exploitation in next 30 days
EPSS Percentile
96.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
ExploitDB: EDB-1232 · Sep 26, 2005
This CVE's current EPSS score of 0.1318 is in the 96th percentile among its peer group of 19,958 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

redhatpatch availablevia redhat_api
Product: Red Hat Desktop version 3 Extras
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Desktop version 4 Extras
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: HelixPlayer-1:1.0.6-0.EL4.1
View patch
debianvendor investigatingvia nvd_reference
View patch
redhatvendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2005-2710Critical

security flaw

Sep 26, 2005

References

bugzilla.redhat.com / bugzilla/show_bug.cgi
Vendor Advisory
marc.info
marc.info
secunia.com / advisories/16954
secunia.com / advisories/16961
secunia.com / advisories/16981
secunia.com / advisories/17116
secunia.com / advisories/17127
securityreason.com / securityalert/27
securityreason.com / securityalert/41
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11015
debian.org / security/2005/dsa-826
Vendor Advisory
gentoo.org / security/en/glsa/glsa-200510-07.xml
idefense.com / application/poi/display
Vendor Advisory
kb.cert.org / vuls/id/361181
Third Party AdvisoryUS Government Resource
novell.com / linux/security/advisories/2005_59_RealPlayer.html
open-security.org / advisories/13
Vendor Advisory
redhat.com / support/errata/RHSA-2005-762.html
redhat.com / support/errata/RHSA-2005-788.html
Vendor Advisory