CVE-2007-3410
NoneCVSS
—
EPSS
36.1%
Published
Jun 26, 2007
CISA due date
—
The record
Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:4::as | HelixPlayer | 0 | 1:1.0.6-0.EL4.2 |
| Red Hat:enterprise_linux:4::as | HelixPlayer-debuginfo | 0 | 1:1.0.6-0.EL4.2 |
| Red Hat:enterprise_linux:4::desktop | HelixPlayer | 0 | 1:1.0.6-0.EL4.2 |
| Red Hat:enterprise_linux:4::desktop | HelixPlayer-debuginfo | 0 | 1:1.0.6-0.EL4.2 |
| Red Hat:enterprise_linux:4::es | HelixPlayer | 0 | 1:1.0.6-0.EL4.2 |
| Red Hat:enterprise_linux:4::es | HelixPlayer-debuginfo | 0 | 1:1.0.6-0.EL4.2 |
| Red Hat:enterprise_linux:4::ws | HelixPlayer | 0 | 1:1.0.6-0.EL4.2 |
| Red Hat:enterprise_linux:4::ws | HelixPlayer-debuginfo | 0 | 1:1.0.6-0.EL4.2 |
| Red Hat:rhel_extras:3 | realplayer | 0 | 0:10.0.9-0.rhel3.4 |
| Red Hat:rhel_extras:5::client | RealPlayer | 0 | 0:10.0.9-3.el5 |
| Red Hat:rhel_extras:5::client | RealPlayer-debuginfo | 0 | 0:10.0.9-3.el5 |
Related vulnerabilities
- CVE-2010-0416 Buffer overflow in the Unescape function in common/util/hxurl.cpp and… Also affects HelixPlayer
- CVE-2005-2629 Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and… Also affects HelixPlayer
- CVE-2005-2710 Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers… Also affects HelixPlayer
- CVE-2005-0455 Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in… Also affects HelixPlayer
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47. CWE-119