CVE-2007-3410

Publication date 26 June 2007

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

Read the notes from the security team

Status

Package Ubuntu Release Status
helix-player 9.10 karmic
Not affected
9.04 jaunty
Not affected
8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
7.10 gutsy Ignored end of life, was needed
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life

Notes

kees

http://service.real.com/realplayer/security/10252007_player/en/ "Issue 3"

References

Other references

Access our resources on patching vulnerabilities