CVE-2005-2710: Realnetworks Helix Player

Medium severity, CVSS 5.1. EPSS: 13.2% chance of exploitation in the next 30 days.

Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.

Affected products

• Realnetworks Helix Player: any version
• Realnetworks Realplayer: version 10.0 only

Published 2005-09-27. Last modified 2026-06-16.