Lucene search

K
centosCentOS ProjectCESA-2005:788
HistorySep 27, 2005 - 10:04 p.m.

HelixPlayer security update

2005-09-2722:04:42
CentOS Project
lists.centos.org
37

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.969 High

EPSS

Percentile

99.7%

CentOS Errata and Security Advisory CESA-2005:788

HelixPlayer is a media player.

A format string bug was discovered in the way HelixPlayer processes RealPix
(.rp) files. It is possible for a malformed RealPix file to execute
arbitrary code as the user running HelixPlayer. The Common Vulnerabilities
and Exposures project (cve.mitre.org) has assigned the name CAN-2005-2710
to this issue.

All users of HelixPlayer are advised to upgrade to this updated package,
which contains HelixPlayer version 10.0.6 and is not vulnerable to this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2005-September/074369.html
https://lists.centos.org/pipermail/centos-announce/2005-September/074370.html

Affected packages:
HelixPlayer

Upstream details at:
https://access.redhat.com/errata/RHSA-2005:788

OSVersionArchitecturePackageVersionFilename
CentOS4i386helixplayer< 1.0.6-0.EL4.1HelixPlayer-1.0.6-0.EL4.1.i386.rpm
CentOS4i386helixplayer< 1.0.6-0.EL4.1HelixPlayer-1.0.6-0.EL4.1.i386.rpm

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.969 High

EPSS

Percentile

99.7%