CVE-2005-0191: Realnetworks Realone Player

Medium severity, CVSS 5.1. EPSS: 3.4% chance of exploitation in the next 30 days.

Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag.

Affected products

• Realnetworks Realone Player: version 1.0 only; version 2.0 only
• Realnetworks Realplayer: version 10.0 only; version 10.0_6.0.12.690 only; version 10.0_beta only; version 10.5 only; version 10.5_6.0.12.1016_beta only; version 10.5_6.0.12.1040 only

Published 2005-01-19. Last modified 2026-06-16.