CVE-2005-2052

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 (6.0.12.1040 through 1069), RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value.

Score

CVSS 2.0 5.1 Medium

Status

Modified - cve@mitre.org

Published

2005-06-28

Last modified

2024-08-07

Affected products

• Realone Player (Realnetworks)
• Realplayer (Realnetworks)

References

• http://marc.info/?l=bugtraq&m=111955853611840&w=2
• http://service.real.com/help/faq/security/050623_player/EN/