Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 up to and including 10.0.8, allows remote malicious users to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
realnetworks realplayer 10.0 |
||
realnetworks realplayer enterprise |
||
realnetworks helix player 10.5-gold |
||
realnetworks realone player |
||
realnetworks realplayer 10.1 |
||
realnetworks helix player 10.0.8 |
||
realnetworks helix player 10.0.7 |
||
realnetworks helix player 10.0.6 |
||
realnetworks helix player 10.0.5 |
||
realnetworks realplayer 10.5 |
Vulmon