CVE-2005-2936: Realnetworks Realone Player

High severity, CVSS 7.2. EPSS: 3.3% chance of exploitation in the next 30 days.

Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8 before 20060322 might allow local users to gain privileges via a malicious C:\program.exe file.

Affected products

• Realnetworks Realone Player: version 1.0 only; version 2.0 only
• Realnetworks Realplayer: version 8.0 only; version 10.0 only; version 10.5_6.0.12.1040 only; version 10.5_6.0.12.1348 only

Published 2005-11-18. Last modified 2026-06-16.