** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be MERGED with CVE-2005-4126. The information regarding this issue is extremely vague and does not provide any verifiable information. It has been posted by a reliable reporter with a prerelease disclosure policy. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:* | all versions | Vulnerable | RealNetworks |
- cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·RealNetworks
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2005-4130
- 2026-10-03 Alias added: GHSA-x2g7-49qc-5qgg
References
More RealNetworks Realplayer vulnerabilities
- TI-2012-04788 Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0… CVSS 2.0HIGH 9.3
- TI-2008-01259 The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer… CVSS 2.0HIGH 9.3
- TI-2013-05928 Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on… CVSS 2.0HIGH 7.5
- TI-2007-05384 Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks… CVSS 2.0HIGH 9.3
- TI-2010-03559 An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0… CVSS 2.0HIGH 9.3
- TI-2007-03304 Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in… CVSS 2.0HIGH 9.3
Sources
- CVE-2005-4130 · CVE Program
- CVE-2005-4130 · NVD
- FIRST EPSS
- GHSA-x2g7-49qc-5qgg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences