A vulnerability has been reported in RealPlayer and Helix Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the wallclock functionality in "SmilTimeValue::parseWallClockValue()" when handling time formats. This can be exploited to cause a stack-based buffer overflow via an SMIL file with an overly long, specially-crafted time string.

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious website.

The vulnerability is reported in RealPlayer 10.5-GOLD. Other versions may also be affected.

Solution
Update to the latest version.
Further details available in Customer Area

Provided and/or discovered by
Discovered by an anonymous person and reported via iDefense Labs.

Changelog
Further details available in Customer Area

Original Advisory
iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=547

Other references
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area