CVE Vulnerabilities

CVE-2005-2630

Published: Nov 18, 2005 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.

Affected Software

NameVendorStart VersionEnd Version
Realone_playerRealnetworks1.0 (including)1.0 (including)
Realone_playerRealnetworks2.0 (including)2.0 (including)
RealplayerRealnetworks**
RealplayerRealnetworks8.0 (including)8.0 (including)
RealplayerRealnetworks10.0 (including)10.0 (including)
RealplayerRealnetworks10.5 (including)10.5 (including)
RealplayerRealnetworks10.5_6.0.12.1040 (including)10.5_6.0.12.1040 (including)
RealplayerRealnetworks10.5_6.0.12.1053 (including)10.5_6.0.12.1053 (including)
RealplayerRealnetworks10.5_6.0.12.1056 (including)10.5_6.0.12.1056 (including)
RealplayerRealnetworks10.5_6.0.12.1059 (including)10.5_6.0.12.1059 (including)
RealplayerRealnetworks10.5_6.0.12.1069 (including)10.5_6.0.12.1069 (including)
RealplayerRealnetworks10.5_6.0.12.1235 (including)10.5_6.0.12.1235 (including)

References