CVE-2005-2052: Buffer Overflow

Published Jun 26, 2005

Updated

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 (6.0.12.1040 through 1069), RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value.

Affected Software

7 affected components

RealNetworks RealPlayer=10.5_6.0.12.1069

RealNetworks RealPlayer=10.0

RealNetworks RealOne Player=2.0

RealNetworks RealPlayer=8.0

RealNetworks RealOne Player=1.0

RealNetworks RealPlayer=10.5_6.0.12.1040

RealNetworks RealPlayer

Remediation

Patch Available

http://service.real.com/help/faq/security/050623_player/EN/

Event History

Jun 26, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2052?

CVE-2005-2052 is classified as a high severity vulnerability due to its potential for remote attackers to execute arbitrary code.

How do I fix CVE-2005-2052?

To fix CVE-2005-2052, users should upgrade to a patched version of RealPlayer or uninstall affected versions of the software.

What versions are affected by CVE-2005-2052?

CVE-2005-2052 affects RealPlayer versions 10.0, 10.5 (up to 10.5_6.0.12.1069), RealOne Player versions 1.0 and 2.0, as well as RealPlayer 8.0.

What type of vulnerability is CVE-2005-2052?

CVE-2005-2052 is a heap-based buffer overflow vulnerability.

Can CVE-2005-2052 be exploited through file formats?

Yes, CVE-2005-2052 can be exploited through an .avi file with a modified strf structure value.