Description
RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted RealMedia video file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | HelixPlayer +1 | 1:1.0.6-3.el4_8.1 | RHSA-2010:0981 |
Advisories 1
- RHSA-2010:0981 Red Hat Security Advisory: HelixPlayer removal Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2010:0981 vendor-advisory
- 20101210 RealNetworks RealPlayer Memory Corruption Vulnerability third-party-advisory
- 1024861 vdb-entry
- http://service.real.com/realplayer/security/12102010_player/en/