CVE-2005-2629
- State
- Published
- Severity
- Not scored
- Published
- Nov 18, 2005
- Updated
- Aug 7, 2024
- Reserved
- Aug 19, 2005
Description
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 169third-party-advisory
- 1015186vdb-entry
- AD20051110athird-party-advisory
- 1015184vdb-entry
- 17559third-party-advisory
- EEYEB20050510third-party-advisory
- 17514third-party-advisory
- 15381vdb-entry
- http://service.real.com/help/faq/security/051110_player/EN/
- DSA-915vendor-advisory
- oval:org.mitre.oval:def:9550vdb-entrysignature
- 17860third-party-advisory
- 1015185vdb-entry
- realplayer-rm-datapacket-bo(23024)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.