Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10 10.1 and possibly 10.5 RealOne Player RealPlayer Enterprise and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8 allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.