Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.1
CVE-2005-2629: RealPlayer, RealOne, Helix Player may run code from bad .rm
CVE-2005-2629 · published 20 years ago
Summary
The RealPlayer, RealOne Player, and Helix Player can be tricked by a specially crafted .rm video file to run unwanted programs on a computer. This happens because the software miscalculates a size value and overwrites memory, letting an attacker take control. Update to the latest versions or apply the vendor's patch to stop the risk.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| realnetworks | helix_player |
1.0 1.0.1 1.0.2 1.0.3 1.0.4 1.0.5 cpe:2.3:a:realnetworks:helix_player:1.0:*:linux:*:*:*:*:* |
| realnetworks | realone_player |
1.0 2.0 cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:* |
| realnetworks | realplayer |
8.0 10.0 10.5 10.5_6.0.12.1040 10.5_6.0.12.1053 10.5_6.0.12.1056 10.5_6.0.12.1059 10.5_6.0.12.1069 10.5_6.0.12.1235 cpe:2.3:a:realnetworks:realplayer:*:*:enterprise:*:*:*:*:* |
Original advisory text
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large val...
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.
References
- http://marc.info/?l=bugtraq&m=113166476423021&w=2
- http://secunia.com/advisories/17514/ Patch Vendor Advisory
- http://secunia.com/advisories/17559
- http://secunia.com/advisories/17860 Patch Vendor Advisory
- http://securityreason.com/securityalert/169
- http://securitytracker.com/id?1015184
- http://securitytracker.com/id?1015185
- http://securitytracker.com/id?1015186
- http://service.real.com/help/faq/security/051110_player/EN/ Patch
- http://www.debian.org/security/2005/dsa-915 Patch Vendor Advisory
- http://www.eeye.com/html/research/advisories/AD20051110a.html Patch Vendor Advisory
- http://www.securityfocus.com/bid/15381/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23024
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
5.1
Medium
Timeline
Published18 Nov 2005
Updated20 Oct 2026
First seen29 Sep 2026
Sources
CVE-2005-2629 · NVD
Track software like this
Free during beta