Lucene search

K
centosCentOS ProjectCESA-2005:788
HistorySep 27, 2005 - 10:04 p.m.

HelixPlayer security update

2005-09-2722:04:42
CentOS Project
lists.centos.org
51

EPSS

0.968

Percentile

99.7%

CentOS Errata and Security Advisory CESA-2005:788

HelixPlayer is a media player.

A format string bug was discovered in the way HelixPlayer processes RealPix
(.rp) files. It is possible for a malformed RealPix file to execute
arbitrary code as the user running HelixPlayer. The Common Vulnerabilities
and Exposures project (cve.mitre.org) has assigned the name CAN-2005-2710
to this issue.

All users of HelixPlayer are advised to upgrade to this updated package,
which contains HelixPlayer version 10.0.6 and is not vulnerable to this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2005-September/074369.html
https://lists.centos.org/pipermail/centos-announce/2005-September/074370.html

Affected packages:
HelixPlayer

Upstream details at:
https://access.redhat.com/errata/RHSA-2005:788

OSVersionArchitecturePackageVersionFilename
CentOS4i386helixplayer< 1.0.6-0.EL4.1HelixPlayer-1.0.6-0.EL4.1.i386.rpm
CentOS4i386helixplayer< 1.0.6-0.EL4.1HelixPlayer-1.0.6-0.EL4.1.i386.rpm