Every CVE Search/ Get API key

CVE-2005-1766

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10...

5.1 MediumFix available

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file.

Exploit likelihood

4.11%Down 3.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.1

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file.

Record
CVE-2005-1766
CVSS 2.0
5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file.

Record
CVE-2005-1766
Updated
2026-11-02
EUVDEUVD-2005-1768 No score

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file.

Record
EUVD-2005-1768
Updated
2026-11-03
GitHub AdvisoriesGHSA-6cqv-mc2f-9hj8 No score

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10...

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file.

Record
GHSA-6cqv-mc2f-9hj8
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
helix-player
Debian:3.1
From an advisory covering 2 CVEs
 before 1.0.4-1sarge1, plus listed versions
1.0.4-11.0.4-1exp
1.0.4-1sarge1
HelixPlayer
Red Hat:enterprise_linux:4::as
 before 1:1.0.5-0.EL4.1
1:1.0.5-0.EL4.1
HelixPlayer-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:1.0.5-0.EL4.1
1:1.0.5-0.EL4.1
HelixPlayer
Red Hat:enterprise_linux:4::desktop
 before 1:1.0.5-0.EL4.1
1:1.0.5-0.EL4.1
HelixPlayer-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:1.0.5-0.EL4.1
1:1.0.5-0.EL4.1
HelixPlayer
Red Hat:enterprise_linux:4::es
 before 1:1.0.5-0.EL4.1
1:1.0.5-0.EL4.1
HelixPlayer-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:1.0.5-0.EL4.1
1:1.0.5-0.EL4.1
HelixPlayer
Red Hat:enterprise_linux:4::ws
 before 1:1.0.5-0.EL4.1
1:1.0.5-0.EL4.1
HelixPlayer-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:1.0.5-0.EL4.1
1:1.0.5-0.EL4.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1766 is a medium vulnerability (CVSS 5.1) in Realnetworks Realplayer, published June 26, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.11%, the 90th percentile. Fixed in HelixPlayer 1:1.0.5-0.EL4.1.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open