CVE-2005-2629

Name of the Vulnerable Software and Affected Versions RealPlayer versions 8, 10, 10.5 RealOne Player versions 1, 2 Helix Player version 10.0.0

Description The issue is caused by an integer overflow that leads to a stack-based buffer overflow, allowing remote attackers to execute arbitrary code. This can be achieved via an .rm movie file with a large value in the length field of the first data packet.

Recommendations For RealPlayer versions 8, 10, 10.5, update to a version that fixes the integer overflow issue. For RealOne Player versions 1, 2, update to a version that fixes the integer overflow issue. For Helix Player version 10.0.0, update to a version that fixes the integer overflow issue. As a temporary workaround, consider avoiding the use of .rm movie files with large values in the length field of the first data packet until a patch is available.