Unscored CVE-2005-2630 EUVD-2005-2631GHSA-7qfw-hvhq-23p7

Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arb…

Published Nov 18, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.

References

AD20051110b third-party-advisory
realplayer-rjs-zip-bo(23025) vdb-entry
1015184 vdb-entry
EEYEB20050701 third-party-advisory
170 third-party-advisory
15382 vdb-entry
17514 third-party-advisory
http://service.real.com/help/faq/security/051110_player/EN/
17860 third-party-advisory
18827 vdb-entry
1015185 vdb-entry