RedHatRHSA-2005:517(RHSA-2005:517) HelixPlayer security update
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.799 High
EPSS
Percentile
98.3%
HelixPlayer is a media player.
A buffer overflow bug was found in the way HelixPlayer processes SMIL files.
An attacker could create a specially crafted SMIL file, which when combined
with a malicious web server, could execute arbitrary code when opened by a
user. The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-1766 to this issue.
All users of HelixPlayer are advised to upgrade to this updated package,
which contains HelixPlayer version 10.0.5 and is not vulnerable to this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | any | ppc | helixplayer | < 1.0.5-0.EL4.1 | HelixPlayer-1.0.5-0.EL4.1.ppc.rpm |
| RedHat | any | src | helixplayer | < 1.0.5-0.EL4.1 | HelixPlayer-1.0.5-0.EL4.1.src.rpm |
| RedHat | any | i386 | helixplayer | < 1.0.5-0.EL4.1 | HelixPlayer-1.0.5-0.EL4.1.i386.rpm |
Related
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.799 High
EPSS
Percentile
98.3%