Integer overflow in RealNetworks RealPlayer 10 and 10.5 RealOne Player 1 and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file resulting in a heap-based buffer overflow.