CVE-2010-0416

CVE-2010-0416 describes a buffer overflow vulnerability in Helix Player 1.0.6 and RealPlayer, specifically within the Unescape function. This flaw allows remote attackers to trigger a denial of service (application crash) or potentially execute arbitrary code by providing a malformed URL argument containing an improperly formatted percent character. The vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. While there is no evidence of active exploitation in the wild or Metasploit/Nuclei modules, an ExploitDB entry exists for a similar issue in Helix Player 11.0.2, and the CVE has received minimal community discussion or media coverage.