Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Helix_player | Realnetworks | * | 10.0.3 (including) |
| Realone_player | Realnetworks | 1.0 (including) | 1.0 (including) |
| Realone_player | Realnetworks | 2.0 (including) | 2.0 (including) |
| Realplayer | Realnetworks | 8.0 (including) | 8.0 (including) |
| Realplayer | Realnetworks | 10.0 (including) | 10.0 (including) |
| Realplayer | Realnetworks | 10.0-beta (including) | 10.0-beta (including) |
| Realplayer | Realnetworks | 10.0_6.0.12.690 (including) | 10.0_6.0.12.690 (including) |
| Red Hat Desktop version 3 Extras | RedHat | * | |
| Red Hat Desktop version 4 Extras | RedHat | * | |
| Red Hat Enterprise Linux 4 | RedHat | HelixPlayer-1:1.0.4-1.1.EL4.2 | * |