← Back

CVE-2005-2922

nvd nist
Published: Dec 31, 2005Modified: Apr 16, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.

Affected (32)

Realnetworks
4 products
Helix Player
Realone Player
Realplayer
Rhapsody
Configuration A
32 vulnerable
Vulnerable SoftwareAffected Versions
Realnetworks
Helix Player
Version 10.0.1
Helix Player
Version 10.0.2
Helix Player
Version 10.0.3
Helix Player
Version 10.0.4
Helix Player
Version 10.0.5
Helix Player
Version 10.0.6
Helix Player
Version 10.0
Realnetworks
Realone Player
All versions
Realone Player
Version 0.288
Realone Player
Version 0.297
Realone Player
Version 1.0
Realone Player
Version 2.0
Realnetworks
Realplayer
All versions
Realplayer
Version 10.0.0.305
Realplayer
Version 10.0.0.331
Realplayer
Version 10.0.1
Realplayer
Version 10.0.2
Realplayer
Version 10.0.3
Realplayer
Version 10.0.4
Realplayer
Version 10.0.5
Realplayer
Version 10.0.6
Realplayer
Version 10.0
Realplayer
Version 10.5
Realplayer
Version 10.5_6.0.12.1040
Realplayer
Version 10.5_6.0.12.1053
Realplayer
Version 10.5_6.0.12.1056
Realplayer
Version 10.5_6.0.12.1059
Realplayer
Version 10.5_6.0.12.1069
Realplayer
Version 10.5_6.0.12.1235
Realplayer
Version 8.0
Realnetworks
Rhapsody
Version 3.0
Rhapsody
Version 3.0_build_0.815

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (24)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
PatchThird Party AdvisoryUS Government Resource
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.