Evil-DB LogoEvil-DB
← All CVEs

CVE-2005-2629

medium · 5.1

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.

5.1
CVSS
12.8%
EPSS (exploit prob.)
96th
EPSS percentile
2005-11-18
Published

AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
realnetworkshelix_player1.0
realnetworkshelix_player1.0.1
realnetworkshelix_player1.0.2
realnetworkshelix_player1.0.3
realnetworkshelix_player1.0.4
realnetworkshelix_player1.0.5
realnetworksrealone_player1.0
realnetworksrealone_player2.0
realnetworksrealplayerall versions
realnetworksrealplayer8.0
realnetworksrealplayer10.0
realnetworksrealplayer10.0
realnetworksrealplayer10.0
realnetworksrealplayer10.5
realnetworksrealplayer10.5_6.0.12.1040
realnetworksrealplayer10.5_6.0.12.1053
realnetworksrealplayer10.5_6.0.12.1056
realnetworksrealplayer10.5_6.0.12.1059
realnetworksrealplayer10.5_6.0.12.1069
realnetworksrealplayer10.5_6.0.12.1235

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-2629