CVE-2010-0417: Realnetworks Helix Player

Medium severity, CVSS 5.0. EPSS: 4.2% chance of exploitation in the next 30 days.

Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption.

Affected products

• Realnetworks Helix Player: version 1.0.6 only
• Realnetworks Realplayer: any version

Published 2010-02-18. Last modified 2026-06-16.