Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8 10 and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file a different vulnerability than CVE-2004-1094.