RealNetworks RealPlayer Zipped Skin File Buffer Overflow (CVE-2005-2630)

There exists a heap buffer overflow vulnerability in RealNetworks RealPlayer Zipped Skin handling component. The vulnerability is caused by insufficient verification of size field values supplied in Zipped Skin files. An attack can exploit this vulnerability by enticing the victim to open a...

CVE-2005-2630

RealPlayer/RealOne Player family (RealPlayer 8, 10, 10.5 and RealOne Player 1 and 2) are affected by CVE-2005-2630 via a heap-based buffer overflow in DUNZIP32.DLL used to handle RealPlayer Skin (RJS) files. The root cause is insufficient verification of size fields in Zipped Skin files, enabling...