Description
Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | HelixPlayer | 1:1.0.6-0.EL4.1 | RHSA-2005:788 |
Advisories 1
- RHSA-2005:788 Red Hat Security Advisory: HelixPlayer security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- http://www.service.real.com/realplayer/security/03162006_player/en/
- 19358 third-party-advisory
- oval:org.mitre.oval:def:11444 vdb-entry signature
- SUSE-SA:2006:018 vendor-advisory
- ADV-2006-1057 vdb-entry
- 1015808 vdb-entry
- RHSA-2005:788 vendor-advisory
- realnetworks-chunked-transferencoding-bo(25409) vdb-entry
- 19365 third-party-advisory
- 17202 vdb-entry
- VU#172489 third-party-advisory
- RHSA-2005:762 vendor-advisory