Vulnerability in Realnetworks Helix_player

CVE-2005-0611

Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.

EPSS: 0.038 (88.9th percentile) — read the EPSS interpretation.

Affected products

Realnetworks Helix_player
Realnetworks Realone_player — versions 1.0, 2.0
Realnetworks Realplayer — versions 8.0, 10.0, 10.5
N/a — versions n/a

References

secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
secalert@redhat.com (x_refsource_OVAL, signature, vdb-entry)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
secalert@redhat.com (mailing-list, x_refsource_VULNWATCH)