{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"RealOne Player v2 ;","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"RealPlayer 8 ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"RealPlayer Enterprise 1.x.","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"RealPlayer 10 (10.0.0.305 -311) pour Mac;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"Helix Player (10.0.0 -3);","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"RealOne Player v1 ;","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}},{"description":"RealPlayer 10.5 (6.0.12.1040-1059) pour Windows;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"RealPlayer 10 (10.0.0 -3) pour Linux;","product":{"name":"N/A","vendor":{"name":"Microsoft","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9bordement de m\u00e9moire est pr\u00e9sente dans le\ntraitement des fichiers .RAM (Real Audio Media).\n\nAu moyen d'un fichier .RAM malicieusement construit, un utilisateur mal\nintentionn\u00e9 peut exploiter cette vuln\u00e9rabilit\u00e9 afin d'ex\u00e9cuter du code\narbitraire sur le syst\u00e8me vuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 des \u00e9diteurs pour l'obtention des\ncorrectifs (cf. Documentation).\n","cves":[],"links":[{"title":"Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2005:363 du 20 avril 2005    :","url":"http://rhn.redhat.com/errata/RHSA-2005:363.html"},{"title":"Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2005:394 du 20 avril 2005    :","url":"http://rhn.redhat.com/errata/RHSA-2005:394.html"},{"title":"Site Internet de RealNetworks :","url":"http://www.real.com"},{"title":"Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SA:2005:026 du 20 avril 2005    :","url":"http://www.novell.com/linux/security/advisories/2005_26_realplayer.html"},{"title":"Mise \u00e0 jour de s\u00e9curit\u00e9 Fedora Core 3 pour HelixPlayer du    19 avril 2005 :","url":"http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/"},{"title":"Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200504-21 du 22 avril 2005    :","url":"http://www.gentoo.org/security/en/glsa/glsa-200504-21.xml"},{"title":"Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2005:392 du 20 avril 2005    :","url":"http://rhn.redhat.com/errata/RHSA-2005:392.html"}],"reference":"CERTA-2005-AVI-151","revisions":[{"description":"version initiale.","revision_date":"2005-04-21T00:00:00.000000"},{"description":"ajout r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Gentoo. Ajout r\u00e9f\u00e9rence CVE.","revision_date":"2005-05-02T00:00:00.000000"}],"risks":[],"summary":null,"title":"Vuln\u00e9rabilit\u00e9 des lecteurs RealPlayer","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 de SuSE","url":null},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 de RealNetworks","url":"http://service.real.com/help/faq/security/050419_player/"}]}