CVE-2004-1481: Realnetworks Helix Player

Medium severity, CVSS 5.1. EPSS: 4.3% chance of exploitation in the next 30 days.

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.

Affected products

• Realnetworks Helix Player: version 1.0 only
• Realnetworks Realone Player: version 1.0 only; version 2.0 only; version 9.0.0.288 only; version 9.0.0.297 only
• Realnetworks Realplayer: affected versions not specified; version 8.0 only; version 10.0 only; version 10.0_6.0.12.690 only; version 10.5 only; version 10.5_6.0.12.1016 only; …

Published 2004-12-31. Last modified 2026-06-16.