Vulnerability Details CVE-2005-2630
Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.05
EPSS Ranking 89.2%
CVSS Severity
CVSS v2 Score 5.1
Products affected by CVE-2005-2630
-
cpe:2.3:a:realnetworks:realone_player:1.0
-
cpe:2.3:a:realnetworks:realone_player:2.0
-
cpe:2.3:a:realnetworks:realplayer:10.0
-
cpe:2.3:a:realnetworks:realplayer:10.5
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1053
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1056
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1059
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1069
-
cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1235
-
cpe:2.3:a:realnetworks:realplayer:2.1.2
-
cpe:2.3:a:realnetworks:realplayer:2.1.3
-
cpe:2.3:a:realnetworks:realplayer:2.1.4
-
cpe:2.3:a:realnetworks:realplayer:8.0