{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"RealPlayer 8 ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"RealPlayer 10.x ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"Helix Player 1.x ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"RealOne Player v2 ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"RealPlayer Enterprise 1.x.","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"RealOne Player v1 ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nPlusieurs d\u00e9bordements de m\u00e9moire sont pr\u00e9sents dans le traitement des\nfichiers WAV (Windows Audio Video) et SMIL (Synchronised Multimedia\nIntegration Language). Ces deux vuln\u00e9rabilit\u00e9s permettent \u00e0 un\nutilisateur mal intentionn\u00e9, via des fichiers malicieusement construits,\nde r\u00e9aliser un d\u00e9ni de service ou d'ex\u00e9cuter du code arbitraire sur le\nsyst\u00e8me ayant le service vuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 des \u00e9diteurs pour l'obtention des\ncorrectifs (cf. Documentation).\n","cves":[],"links":[{"title":"Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:271 du 03 mars 2005 :","url":"http://rhn.redhat.com/errata/RHSA-2005-271.html"},{"title":"Site Internet de RealNetworks :","url":"http://www.real.com"},{"title":"Bulletin de s\u00e9curit\u00e9 iDEFENSE du 01 mars 2005 :","url":"http://www.idefense.com/application/poi/display?id=209"},{"title":"Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:265 du 03 mars 2005 :","url":"http://rhn.redhat.com/errata/RHSA-2005-265.html"},{"title":"Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SA:2005:014 du 09 mars 2005    :","url":"http://www.novell.com/linux/security/advisories/2005_14_realplayer.html"}],"reference":"CERTA-2005-AVI-099","revisions":[{"description":"version initiale.","revision_date":"2005-03-03T00:00:00.000000"},{"description":"ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 RedHat RHSA-2005:265 et RHSA-2005:271.","revision_date":"2005-03-04T00:00:00.000000"},{"description":"ajout de la r\u00e9f\u00e9rence CVE CAN-2005-0611 et des bulletins de s\u00e9curit\u00e9 iDEFENSE et SUSE SUSE-SA:2005:014.","revision_date":"2005-03-11T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire"},{"description":"D\u00e9ni de service"}],"summary":"Deux vuln\u00e9rabilit\u00e9s pr\u00e9sentes sur les produits RealNetworks peuvent \u00eatre\nexploit\u00e9es par un utilisateur mal intentionn\u00e9 pour compromettre un\nsyst\u00e8me.\n","title":"Vuln\u00e9rabilit\u00e9s dans RealOne Player","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 de RealNetworks","url":"http://service.real.com/help/faq/security/050224_player/EN/"}]}