CVE-2005-2629

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix...

5.1 MediumPublic exploitFix available

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.

Exploit likelihood

12.8%Down 16.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.1

Record: CVE-2005-2629
CVSS 2.0: 5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-2629
Updated: 2026-11-02

EUVDEUVD-2005-2630 No score

Record: EUVD-2005-2630
Updated: 2026-11-03

GitHub AdvisoriesGHSA-595r-v88j-xqx7 No score

Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix...

Record: GHSA-595r-v88j-xqx7
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`helix-player` Debian:3.1	before 1.0.4-1sarge2, plus listed versions 1.0.4-11.0.4-1exp1.0.4-1sarge1	1.0.4-1sarge2
`HelixPlayer` Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs	before 1:1.0.6-0.EL4.1	1:1.0.6-0.EL4.1
`HelixPlayer-debuginfo` Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs	before 1:1.0.6-0.EL4.1	1:1.0.6-0.EL4.1
`HelixPlayer` Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs	before 1:1.0.6-0.EL4.1	1:1.0.6-0.EL4.1
`HelixPlayer-debuginfo` Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs	before 1:1.0.6-0.EL4.1	1:1.0.6-0.EL4.1
`HelixPlayer` Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs	before 1:1.0.6-0.EL4.1	1:1.0.6-0.EL4.1
`HelixPlayer-debuginfo` Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs	before 1:1.0.6-0.EL4.1	1:1.0.6-0.EL4.1
`HelixPlayer` Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs	before 1:1.0.6-0.EL4.1	1:1.0.6-0.EL4.1
`HelixPlayer-debuginfo` Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs	before 1:1.0.6-0.EL4.1	1:1.0.6-0.EL4.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	RealNetworks RealOne Player/RealPlayer - '.RM' Local Stack Buffer Overflow	2005-11-10

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2629 is a medium vulnerability (CVSS 5.1) in Realnetworks Helix Player, published November 18, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.8%, the 96th percentile. Fixed in helix-player 1.0.4-1sarge2.

References

Show 25 moreShow less