CVE-2006-0323: Realnetworks Helix Player

High severity, CVSS 9.3. EPSS: 16.7% chance of exploitation in the next 30 days.

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.

Affected products

• Realnetworks Helix Player: any version
• Realnetworks Realone Player: any version
• Realnetworks Realplayer: version 10.0 only; version 10.0.6 only; version 10.5 only
• Realnetworks Rhapsody: version 3 only

Published 2006-03-23. Last modified 2026-06-16.