HOMEVULNERABILITIESCVE-2005-4126
HIGH

CVE-2005-4126

NVD-CWE-OtherPublished: December 9, 2005· Updated: Jun 16, 2026

7.5
CVSS v3.1

Official Description

** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding this issue is extremely vague and does not provide any verifiable information. It has been posted by a reliable reporter with a prerelease disclosure policy. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED.

NVD Source

Technical Analysis

CVE-2005-4126 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges Req.
User Interaction
Scope
Impact
ConfidentialityP
IntegrityP
AvailabilityP
AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Vendors & Products

realnetworks1 product(s)
realplayer
Source: NVD CPE · 14 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

All References (4)

Quick Facts

CVE IDCVE-2005-4126
CVSS Score7.5 / 10
SeverityHIGH
CISA KEVNo
Affected1 vendor(s)
PublishedDec 9, 2005

Related CVEs (NVD-CWE-Other)

Recommended Actions

  • Apply vendor patches immediately
  • Monitor CVE-2005-4126 in threat intel feeds
  • Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.