There are reports that crashes can be achieved in multiple versions of the Real Media file format including the G2 format and older formats by remote users. This has not entirely confirmed.

RealPlayer reportedly trusts a null terminated user-supplied value that specifies the length of various fields of the format. A remote user can create a media format that sets the two byte string length indicator for certain fields to the string '0xFFFF' to cause the player to crash.

No solution or workaround is available at this time.