CVE-2005-0611

Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.

Score

CVSS 2.0 5.1 Medium

Status

Modified - secalert@redhat.com

Published

2005-05-02

Last modified

2024-08-07

Affected products

• Helix Player (Realnetworks)
• Realone Player (Realnetworks)
• Realplayer (Realnetworks)

References

• http://marc.info/?l=bugtraq&m=110979465912834&w=2
• http://marc.info/?l=vulnwatch&m=110977858619314&w=2
• http://service.real.com/help/faq/security/050224_player/EN/
• http://www.redhat.com/support/errata/RHSA-2005-265.html
• http://www.redhat.com/support/errata/RHSA-2005-271.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11419