** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be…
Priority LOW 36Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding this issue is extremely vague and does not provide any verifiable information. It has been posted by a reliable reporter with a prerelease disclosure policy. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED.
Why it matters now
EPSS 0.01816 78th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:realnetworks:realplayer:6.0:*:win32:*:*:*:*:* | 6.0 | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:7.0:*:win32:*:*:*:*:* | 7.0 | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:* | 8.0 | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:* | 10.0_6.0.12.690 | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:* | 10.0_beta | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:* | 10.5 | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:* | 10.5_6.0.12.1016_beta | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:* | 10.5_6.0.12.1040 | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:* | 10.5_6.0.12.1053 | Vulnerable | RealNetworks |
- cpe:2.3:a:realnetworks:realplayer:6.0:*:win32:*:*:*:*:* Versions 6.0 Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:7.0:*:win32:*:*:*:*:* Versions 7.0 Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:* Versions 8.0 Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:* Versions 10.0_6.0.12.690 Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:* Versions 10.0_beta Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:* Versions 10.5 Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:* Versions 10.5_6.0.12.1016_beta Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:* Versions 10.5_6.0.12.1040 Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053:*:*:*:*:*:*:* Versions 10.5_6.0.12.1053 Vulnerable ·RealNetworks
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056:*:*:*:*:*:*:* | 10.5_6.0.12.1056 | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059:*:*:*:*:*:*:* | 10.5_6.0.12.1059 | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:* | 10.5_6.0.12.1069 | Vulnerable | RealNetworks |
| cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235:*:*:*:*:*:*:* | 10.5_6.0.12.1235 | Vulnerable | RealNetworks |
- cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056:*:*:*:*:*:*:* Versions 10.5_6.0.12.1056 Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059:*:*:*:*:*:*:* Versions 10.5_6.0.12.1059 Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069:*:*:*:*:*:*:* Versions 10.5_6.0.12.1069 Vulnerable ·RealNetworks
- cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235:*:*:*:*:*:*:* Versions 10.5_6.0.12.1235 Vulnerable ·RealNetworks
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2005-4126
- 2026-10-03 Alias added: GHSA-r43v-pq8h-xhmw
References
Advisory 1
More RealNetworks Realplayer vulnerabilities
- TI-2012-04788 Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0… CVSS 2.0HIGH 9.3
- TI-2008-01259 The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer… CVSS 2.0HIGH 9.3
- TI-2013-05928 Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on… CVSS 2.0HIGH 7.5
- TI-2007-05384 Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks… CVSS 2.0HIGH 9.3
- TI-2010-03559 An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0… CVSS 2.0HIGH 9.3
- TI-2007-03304 Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in… CVSS 2.0HIGH 9.3
Sources
- CVE-2005-4126 · CVE Program
- CVE-2005-4126 · NVD
- FIRST EPSS
- GHSA-r43v-pq8h-xhmw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences