CVE-2007-3410

CVE-2007-3410 is a critical-severity vulnerability in Realnetworks Helix Player with a CVSS 2.0 base score of 9.3. Its EPSS exploit-prediction score of 36% places it in the 98th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-119.

Key facts

• Severity: Critical (CVSS 2.0 base score 9.3)
• EPSS exploit prediction: 36% (98th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-119
• Affected product: Realnetworks Helix Player
• Published: 2007-06-26
• Last modified: 2026-06-16

Description

Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

Frequently asked questions

What is CVE-2007-3410?

Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.

How severe is CVE-2007-3410?

CVE-2007-3410 has a CVSS 2.0 base score of 9.3, rated critical severity.

Is CVE-2007-3410 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 36% (98th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-3410?

CVE-2007-3410 primarily affects Realnetworks Helix Player. In total, 10 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-3410?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2007-3410 published?

CVE-2007-3410 was published on 2007-06-26 and last updated on 2026-06-16.

References

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=547
• http://osvdb.org/37374
• http://osvdb.org/38342
• http://secunia.com/advisories/25819
• http://secunia.com/advisories/25859
• http://secunia.com/advisories/26463
• http://secunia.com/advisories/26828
• http://secunia.com/advisories/27361
• http://security.gentoo.org/glsa/glsa-200709-05.xml
• http://securitytracker.com/id?1018297
• http://securitytracker.com/id?1018299
• http://service.real.com/realplayer/security/10252007_player/en/
• http://www.attrition.org/pipermail/vim/2007-October/001841.html
• http://www.kb.cert.org/vuls/id/770904
• http://www.redhat.com/support/errata/RHSA-2007-0605.html
• http://www.redhat.com/support/errata/RHSA-2007-0841.html
• http://www.securityfocus.com/bid/24658
• http://www.vupen.com/english/advisories/2007/2339
• http://www.vupen.com/english/advisories/2007/3628
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35088
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10554

Affected products (10)

• cpe:2.3:a:realnetworks:helix_player:10.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:realnetworks:helix_player:10.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:realnetworks:helix_player:10.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:realnetworks:helix_player:10.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:realnetworks:helix_player:10.5-gold:*:*:*:*:*:*:*
• cpe:2.3:a:realnetworks:realone_player:*:*:*:*:*:*:*:*
• cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*
• cpe:2.3:a:realnetworks:realplayer:10.1:*:*:*:*:*:*:*
• cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*
• cpe:2.3:a:realnetworks:realplayer_enterprise:*:*:*:*:*:*:*:*

More vulnerabilities in Realnetworks Helix Player

• CVE-2009-4257 — Critical (CVSS 9.3): Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10,…
• CVE-2009-4248 — Critical (CVSS 9.3): Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks…
• CVE-2009-4247 — Critical (CVSS 9.3): Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040…
• CVE-2009-4246 — Critical (CVSS 9.3): Stack-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer…
• CVE-2009-4245 — Critical (CVSS 9.3): Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer…
• CVE-2009-4244 — Critical (CVSS 9.3): Heap-based buffer overflow in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer…

All CVEs affecting Realnetworks Helix Player →

Other CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities

• CVE-2026-2778 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in…
• CVE-2026-2776 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability…
• CVE-2025-1866 — Critical (CVSS 10.0): Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows…
• CVE-2022-27625 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
• CVE-2022-27624 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
• CVE-2020-11896 — Critical (CVSS 10.0): The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

Browse all CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities →