CVE-2005-2630: Buffer Overflow
Published Nov 18, 2005
·Updated
Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.
Affected Software
14 affected components
RealNetworks RealPlayer=10.5_6.0.12.1069
RealNetworks RealPlayer=10.0
RealNetworks RealOne Player=2.0
RealNetworks RealPlayer=8.0
RealNetworks RealPlayer=10.5_6.0.12.1053
RealNetworks RealPlayer=10.0
RealNetworks RealOne Player=1.0
RealNetworks RealPlayer=10.5_6.0.12.1056
RealNetworks RealPlayer=10.5_6.0.12.1235
RealNetworks RealPlayer=10.5_6.0.12.1059
RealNetworks RealPlayer=10.5
RealNetworks RealPlayer=10.0
RealNetworks RealPlayer=10.5_6.0.12.1040
RealNetworks RealPlayer
Remediation
Patch Available
Patch Available
Event History
Nov 18, 2005
CVE Published
11:03 PM
Nov 19, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2630?
CVE-2005-2630 is classified as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2005-2630?
To fix CVE-2005-2630, you should update RealPlayer to the latest version provided by RealNetworks.
3
What versions of RealPlayer are affected by CVE-2005-2630?
CVE-2005-2630 affects RealPlayer 8, 10, 10.5, and RealOne Player versions 1 and 2.
4
Can CVE-2005-2630 be exploited remotely?
Yes, CVE-2005-2630 can be exploited remotely by sending a crafted RealPlayer Skin (RJS) file.
5
What is the nature of the flaw in CVE-2005-2630?
CVE-2005-2630 is a heap-based buffer overflow that allows attackers to execute arbitrary code.