CVE-2005-2922

Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.

• realnetworks helix player 10.0 • realnetworks helix player 10.0.1 • realnetworks helix player 10.0.2 • realnetworks helix player 10.0.3 • realnetworks helix player 10.0.4 • realnetworks helix player 10.0.5 • realnetworks helix player 10.0.6 • realnetworks realone player • realnetworks realone player 0.288 • realnetworks realone player 0.297 • realnetworks realone player 1.0 • realnetworks realone player 2.0 • realnetworks realplayer • realnetworks realplayer 8.0 • realnetworks realplayer 10.0 • realnetworks realplayer 10.0.0.305 • realnetworks realplayer 10.0.0.331 • realnetworks realplayer 10.0.1 • realnetworks realplayer 10.0.2 • realnetworks realplayer 10.0.3 • realnetworks realplayer 10.0.4 • realnetworks realplayer 10.0.5 • realnetworks realplayer 10.0.6 • realnetworks realplayer 10.5 • realnetworks realplayer 10.5 6.0.12.1040 • realnetworks realplayer 10.5 6.0.12.1053 • realnetworks realplayer 10.5 6.0.12.1056 • realnetworks realplayer 10.5 6.0.12.1059 • realnetworks realplayer 10.5 6.0.12.1069 • realnetworks realplayer 10.5 6.0.12.1235 • realnetworks rhapsody 3.0 • realnetworks rhapsody 3.0 build 0.815