CVE:CVE-2009-4241
CNNVD:CNNVD-201001-258
RealPlayer是一个在Internet上通过流技术实现音频和视频的实时传输的在线收听工具软件。 
RealNetworks RealPlayer 10版本, RealPlayer 10.5 6.0.12.1040至6.0.12.1741版本, RealPlayer 11 11.0.0至11.0.4版本, RealPlayer Enterprise, Mac RealPlayer 10和10.1版本, Linux RealPlayer 10版本, 以及 Helix Player 10.x版本中存在堆缓冲区溢出漏洞。远程攻击者可以借助无效的ASMRuleBook结构触发堆内存破坏，导致执行任意代码。
solution:Upgrade realnetworks realplayer to a higher version than 10.0,10.5,11.0,11.0.1,11.0.2,11.0.3,11.0.4,11.0.5,10.1,11.0.0,and avoid the version 10.0,10.5,11.0,11.0.1,11.0.2,11.0.3,11.0.4,11.0.5,10.1,11.0.0; Upgrade realnetworks realplayer_enterprise to a higher version than *; Upgrade realnetworks realplayer_sp to a higher version than 1.0.0,1.0.1,and avoid the version 1.0.0,1.0.1; Upgrade realnetworks helix_player to a higher version than 10.0,11.0.0,11.0.1,and avoid the version 10.0,11.0.0,11.0.1