CVE-2005-2052: Realnetworks Realone Player

Medium severity, CVSS 5.1. EPSS: 2.2% chance of exploitation in the next 30 days.

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 (6.0.12.1040 through 1069), RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value.

Affected products

• Realnetworks Realone Player: version 1.0 only; version 2.0 only
• Realnetworks Realplayer: any version; version 8.0 only; version 10.0 only; version 10.5_6.0.12.1040 only; version 10.5_6.0.12.1069 only

Published 2005-06-28. Last modified 2026-06-16.