Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-2922
HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-2922

2005-12-3105:00:00
CWE-119
[email protected]
web.nvd.nist.gov
6

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.024

Percentile

89.9%

JSON

Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.

Affected configurations

Nvd
Node
realnetworkshelix_playerMatch10.0linux
OR
realnetworkshelix_playerMatch10.0.1linux
OR
realnetworkshelix_playerMatch10.0.2linux
OR
realnetworkshelix_playerMatch10.0.3linux
OR
realnetworkshelix_playerMatch10.0.4linux
OR
realnetworkshelix_playerMatch10.0.5linux
OR
realnetworkshelix_playerMatch10.0.6linux
OR
realnetworksrealone_player
OR
realnetworksrealone_playerMatch0.288mac_os_x
OR
realnetworksrealone_playerMatch0.297mac_os_x
OR
realnetworksrealone_playerMatch1.0
OR
realnetworksrealone_playerMatch2.0
OR
realnetworksrealplayerenterprise
OR
realnetworksrealplayerMatch8.0win32
OR
realnetworksrealplayerMatch10.0
OR
realnetworksrealplayerMatch10.0.0.305mac_os
OR
realnetworksrealplayerMatch10.0.0.331mac_os
OR
realnetworksrealplayerMatch10.0.1linux
OR
realnetworksrealplayerMatch10.0.2linux
OR
realnetworksrealplayerMatch10.0.3linux
OR
realnetworksrealplayerMatch10.0.4linux
OR
realnetworksrealplayerMatch10.0.5linux
OR
realnetworksrealplayerMatch10.0.6linux
OR
realnetworksrealplayerMatch10.5
OR
realnetworksrealplayerMatch10.5_6.0.12.1040
OR
realnetworksrealplayerMatch10.5_6.0.12.1053
OR
realnetworksrealplayerMatch10.5_6.0.12.1056
OR
realnetworksrealplayerMatch10.5_6.0.12.1059
OR
realnetworksrealplayerMatch10.5_6.0.12.1069
OR
realnetworksrealplayerMatch10.5_6.0.12.1235
OR
realnetworksrhapsodyMatch3.0
OR
realnetworksrhapsodyMatch3.0_build_0.815

Related

nessus 6
saint 4
cert 1
freebsd 1
securityvulns 2
openvas 2
cve 1
cvelist 1
suse 1
redhat 2
centos 1
nessus
nessus
FreeBSD : linux-realplayer -- heap overflow (fe4c84fc-bdb5-11da-b7d4-00123ffe8333)
2006-05-13 00:00:00
SUSE-SA:2006:018: RealPlayer
2006-03-27 00:00:00
RHEL 4 : HelixPlayer (RHSA-2005:788)
2005-10-05 00:00:00
saint
saint
RealPlayer invalid chunk header heap overflow
2006-03-31 00:00:00
RealPlayer invalid chunk header heap overflow
2006-03-31 00:00:00
RealPlayer invalid chunk header heap overflow
2006-03-31 00:00:00
cert
cert
RealNetworks products fail to properly handle chunked data
2006-04-05 00:00:00
freebsd
freebsd
linux-realplayer -- heap overflow
2006-03-23 00:00:00
securityvulns
securityvulns
iDefense Security Advisory 03.23.06: RealNetworks RealPlayer and Helix Player Invalid Chunk Size Heap Overflow Vulnerability
2006-03-24 00:00:00
[Full-disclosure] SUSE Security Announcement: RealPlayer security problems (SUSE-SA:2006:018)
2006-03-23 00:00:00
openvas
openvas
FreeBSD Ports: linux-realplayer
2008-09-04 00:00:00
FreeBSD Ports: linux-realplayer
2008-09-04 00:00:00
cve
cve
CVE-2005-2922
2006-03-23 23:00:00
cvelist
cvelist
CVE-2005-2922
2006-03-23 23:00:00
suse
suse
remote code execution in RealPlayer
2006-03-23 12:04:47
redhat
redhat
(RHSA-2005:788) HelixPlayer security update
2005-09-27 00:00:00
(RHSA-2005:762) RealPlayer security update
2005-09-27 00:00:00
centos
centos
HelixPlayer security update
2005-09-27 22:04:42

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.024

Percentile

89.9%

JSON
Related for NVD:CVE-2005-2922
nessus6saint4cert1freebsd1securityvulns2openvas2cve1cvelist1suse1redhat2centos1