CVE-2005-4126

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding this issue is extremely...

CVE-2005-4130

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be...

CVE-2005-4130

Technical details are not publicly available in the provided documents for CVE-2005-4130. This entry is marked UNVERIFIABLE/PRERELEASE; monitor for updates from reliable sources.

CVE-2005-4126

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding this issue is extremely...

CVE-2005-4130

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be...

CVE-2005-4126

Technical details for CVE-2005-4126 are not publicly available in the provided documents. The entry is UNVERIFIABLE/PRERELEASE and lacks verifiable information. Monitor for updates from trusted sources to confirm applicability, affected products, and remediation.

CVE-2005-2629

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a...

CVE-2005-2630

Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin RJS file, a different vulnerability than CVE-2004-1094...

CVE-2005-2629

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a...

CVE-2005-3677

Buffer overflow in RealNetworks RealPlayer 10 and 10.5 allows remote attackers to execute arbitrary code via a crafted image in a RealPlayer Skin RJS file. NOTE: due to the lack of details, it is unclear how this is different than CVE-2005-2629 and CVE-2005-2630, but the vendor advisory implies...

CVE-2005-2630

Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin RJS file, a different vulnerability than CVE-2004-1094...

CVE-2005-3677

Buffer overflow in RealNetworks RealPlayer 10 and 10.5 allows remote attackers to execute arbitrary code via a crafted image in a RealPlayer Skin RJS file. NOTE: due to the lack of details, it is unclear how this is different than CVE-2005-2629 and CVE-2005-2630, but the vendor advisory implies...

CVE-2005-2629

CVE-2005-2629 describes an integer/stack-based overflow in RealNetworks RealPlayer (versions 8, 10, 10.5), RealOne Player (1–2), and Helix Player 10.0.0 that can be triggered by a malformed .rm file with a large length field in the first data packet, allowing remote code execution. The vulnerabil...

CVE-2005-2630

RealPlayer/RealOne Player family (RealPlayer 8, 10, 10.5 and RealOne Player 1 and 2) are affected by CVE-2005-2630 via a heap-based buffer overflow in DUNZIP32.DLL used to handle RealPlayer Skin (RJS) files. The root cause is insufficient verification of size fields in Zipped Skin files, enabling...

CVE-2005-2629

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a...

CVE-2005-3677

CVE-2005-3677 describes a buffer overflow in RealNetworks RealPlayer 10/10.5 triggered by a crafted image in a RealPlayer Skin (RJS) file, allowing remote code execution. The description notes that details are sparse and it is unclear how this differs from CVE-2005-2629 and CVE-2005-2630, but ven...

CVE-2005-2936

CVE-2005-2936 is an unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 and RealPlayer 10/RealOne Player lines (versions 6.0.12.1040–6.0.12.1348; Pre-20060322 RealPlayer 8; RealOne Player v1/v2), which could allow a local user to gain privileges by placing a malicious C:\pr...

CVE-2005-2936

Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8 before 20060322 might allow local users to gain privileges via a malicious C:\program.exe file...

High Risk Flaw in RealPlayer

John Heasman of NGSSoftware has discovered a high risk vulnerability in RealPlayer. Versions affected include: RealPlayer 10.5 6.0.12.1040-1235 RealPlayer 10 Note: RealOne Player v1 & v2, RealPlayer 8 and RealPlayer Enterprise have also been updated to resolve issues reported by other security...

[EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II

RealPlayer Zipped Skin File Buffer Overflow II Release Date: November 10, 2005 Date Reported: June 26, 2005 Severity: High Code Execution Vendor: RealNetworks Systems Affected: Windows: RealPlayer 10.5 6.0.12.1040-1235 RealPlayer 10 RealOne Player v2 RealOne Player v1 RealPlayer 8 Overview: eEye...