CVE-2005-2630: Realnetworks Realone Player

Medium severity, CVSS 5.1. EPSS: 4.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.

Affected products

• Realnetworks Realone Player: version 1.0 only; version 2.0 only
• Realnetworks Realplayer: any version; version 8.0 only; version 10.0 only; version 10.5 only; version 10.5_6.0.12.1040 only; version 10.5_6.0.12.1053 only; …

Published 2005-11-18. Last modified 2026-06-16.