CVE-2005-0192: Realnetworks Realone Player

Low severity, CVSS 2.6. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.

Affected products

• Realnetworks Realone Player: version 1.0 only; version 2.0 only
• Realnetworks Realplayer: version 10.0 only; version 10.5 only

Published 2004-10-06. Last modified 2026-06-16.