Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2005-2629
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2005-2629

Description:
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/23024

SUSE

ST
  1015184
  1015185
  1015186

SREASON
  http://securityreason.com/securityalert/169

SAID
  Secunia Advisory: SA17514
  Secunia Advisory: SA17860
  Secunia Advisory: SA17559

EEYE
  http://marc.theaimsgroup.com/?l=bugtraq&m=113166476423021&w=2
  http://www.eeye.com/html/research/advisories/AD20051110a.html

DEBIAN
  http://www.debian.org/security/2005/dsa-915

CONFIRM
  http://service.real.com/help/faq/security/051110_player/EN/

BID
  15381


Return to the previous page.