CVE:CVE-2010-0417
CNNVD:CNNVD-201002-188
RealNetworks RealPlayer和Helix Player是流行的媒体播放程序。
Helix Player和RealPlayer程序common/util/rlstate.cpp存在缓冲区溢出漏洞。远程攻击者通过带有大量rule-separator字符的Rulebook结构，触发堆内存破坏，导致拒绝服务(应用崩溃)，执行任意代码。
solution:Upgrade realnetworks helix_player to a higher version than 1.0.6,and avoid the version 1.0.6; Upgrade realnetworks realplayer to a higher version than *