CVE:CVE-2010-0416
CNNVD:CNNVD-201002-187
RealNetworks RealPlayer和Helix Player是流行的媒体播放程序。
Helix Player和RealPlayer程序common/util/hxurl.cpp 和 player/hxclientkit/src/CHXClientSink.cpp函数Unescape存在缓冲区溢出漏洞。远程攻击者可以通过包含%字符(而该字符不是在两个十六进制数字的后面)的URL，导致拒绝服务(应用崩溃)或执行任意代码。
solution:Upgrade realnetworks helix_player to a higher version than 1.0.6,and avoid the version 1.0.6; Upgrade realnetworks realplayer to a higher version than *