Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x RealOne Player Rhapsody 3 and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size or (2) other unspecified manipulations.