CVE:CVE-2009-4246
CNNVD:CNNVD-201001-249
RealNetworks RealPlayer 10版本, RealPlayer 10.5 6.0.12.1040至6.0.12.1741版本, RealPlayer 11 11.0.0至11.0.4版本, RealPlayer Enterprise, Mac RealPlayer 10, 10.1, Linux RealPlayer 10版本, 和 Helix Player 10.x版本中存在栈缓冲区溢出。用户协助式的远程攻击者可以借助一个畸形的 .RJS皮肤文件，执行任意代码，且该皮肤文件包含一个具有特制长度值的web.xmb文件。
solution:Upgrade realnetworks realplayer to a higher version than 10.0,10.5,11.0,11.0.1,11.0.2,11.0.3,11.0.4,11.0.5,10.1,11.0.0,and avoid the version 10.0,10.5,11.0,11.0.1,11.0.2,11.0.3,11.0.4,11.0.5,10.1,11.0.0; Upgrade realnetworks realplayer_enterprise to a higher version than *; Upgrade realnetworks realplayer_sp to a higher version than 1.0.0,1.0.1,and avoid the version 1.0.0,1.0.1; Upgrade realnetworks helix_player to a higher version than 10.0,11.0.0,11.0.1,and avoid the version 10.0,11.0.0,11.0.1