CVE-2005-2922

no score yetEPSS 5.8%

Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.

EPSS: 5.8% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2005-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

realnetworks:helix_player
realnetworks:realone_player
realnetworks:realplayer
realnetworks:rhapsody

References

http://secunia.com/advisories/19358
http://secunia.com/advisories/19365
http://securitytracker.com/id?1015808
http://www.kb.cert.org/vuls/id/172489
http://www.novell.com/linux/security/advisories/2006_18_realplayer.html

Check your stack JSON