CVE-2007-3410: Realnetworks Helix Player

High severity, CVSS 9.3. EPSS: 36.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

Affected products

• Realnetworks Helix Player: version 10.0.5 only; version 10.0.6 only; version 10.0.7 only; version 10.0.8 only; version 10.5-gold only
• Realnetworks Realone Player: any version
• Realnetworks Realplayer: version 10.0 only; version 10.1 only; version 10.5 only
• Realnetworks Realplayer Enterprise: any version

Published 2007-06-26. Last modified 2026-06-16.