NVD

Id
68589  
Name
CVE-2005-2922  
Description
Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-12-31  
Modified Date
2017-07-10  
Seq
2005-2922  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
354405 68589 CVE-2005-2922 oval:org.mitre.oval:def:11444  View
354406 68589 CVE-2005-2922 1015808  View
354407 68589 CVE-2005-2922 VU#172489  View
354408 68589 CVE-2005-2922 SUSE-SA:2006:018  View
354409 68589 CVE-2005-2922 RHSA-2005:762  View
354410 68589 CVE-2005-2922 RHSA-2005:788  View
354411 68589 CVE-2005-2922 17202  View
354412 68589 CVE-2005-2922 http://www.service.real.com/realplayer/security/03162006_player/en/  View
354413 68589 CVE-2005-2922 ADV-2006-1057  View
354414 68589 CVE-2005-2922 realnetworks-chunked-transferencoding-bo(25409)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57926 JVNDB-2006-000122 RealNetworks 製品の embedded player におけるヒープオーバーフローの脆弱性 ------------ CVE-2005-2922 14126 CVE-2005-2922 68589 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000122.html 2006-03-03 2007-04-01 View