helixplayer is vulnerable to arbitrary code execution. Multiple security flaws were discovered in RealPlayer. Helix Player and RealPlayer share a common source code base; therefore, some of the flaws discovered in RealPlayer may also affect Helix Player. Some of these flaws could, when opening, viewing, or playing a malicious media file or stream, lead to arbitrary code execution with the privileges of the user running Helix Player.
osvdb.org/69852
service.real.com/realplayer/security/12102010_player/en/
www.redhat.com/support/errata/RHSA-2010-0981.html
www.securitytracker.com/id?1024861
www.zerodayinitiative.com/advisories/ZDI-10-280
access.redhat.com/errata/RHSA-2010:0981
access.redhat.com/security/updates/classification/#critical
player.helixcommunity.org/