CVE-2005-2922

Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.

Affected products

Helix Player, Realone Player, Realplayer, Red Hat

Realnetworks Helix Player

= 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6

Realnetworks Realone Player

All versions

Realnetworks Realplayer

All versions

Realnetworks Rhapsody

= 3.0, 3.0_build_0.815

CVSS 2.0

9.3 HIGH

EPSS

5.8% (92th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2006-03-23