CVE-2007-3410

RealPlayer/HelixPlayer buffer overflow

Published Jun 26, 2007 CVSS 2.0 · 9.3 Critical EPSS 36.1% KEV · Not listed
Description
Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 2:14 PM
Reserved
Jun 26, 2007, 12:00 AM
Status
Modified
Published
Jun 26, 2007, 10:30 PM
Modified
Jun 16, 2026, 10:41 PM
Severity
Critical
Public date
Jun 26, 2007, 12:00 AM