CentOS 4 : HelixPlayer (CESA-2010:0094)

An updated HelixPlayer package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. Multiple buffer and integer overflow flaws were...

Critical: Red Hat Security Advisory: HelixPlayer security update

An updated HelixPlayer package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. Multiple buffer and integer overflow flaws were...

RealNetworks RealPlayer SMIL file BOF Vulnerability (Linux)

This host is installed with RealPlayer which is prone to Buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrealplayersmilboflin.nasl 5401 2017-02-23 09:46:07Z teissa $ RealNetworks RealPlayer SMIL file BOF Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2010...

CVE-2009-4257

Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10 and 11.0.0, and Helix Player...

CVE-2009-4257

CVE-2009-4257 is a heap-based buffer overflow in SMIL handling within HelixPlayer/RealPlayer (smlrender.dll/smlpkt.cpp) that could allow remote code execution when processing crafted SMIL data. Public advisories (Red Hat RHSA-2010-0094, CentOS/SuSE/Oracle Linux updates, OpenVAS/NASL entries) docu...

RealPlayer for Windows < Build 12.0.0.319 Multiple Buffer Overflows

According to its build number, the installed version of RealPlayer on the remote Windows host has multiple buffer overflow vulnerabilities : - A RealPlayer 'ASM' Rulebook heap-based overflow. CVE-2009-4241 - A RealPlayer 'GIF' file heap overflow. CVE-2009-4242 - A RealPlayer media overflow 'http'...

CVE-2007-4257

Multiple buffer overflows in Live for Speed LFS S1 and S2 allow user-assisted remote attackers to execute arbitrary code via 1 a .spr file single player replay file containing a long user name or 2 a .ply file containing a long number plate string, different vectors than CVE-2007-4140...

CVE-2007-4257

CVE-2007-4257 identifies multiple buffer overflows in Live for Speed (S1/S2) that enable user-assisted remote code execution via crafted replay/number plate files. The vectors are: (1) a .spr replay file with a long user name and (2) a .ply file with a long number plate string; these are describe...

CVE-2006-4257

CVE-2006-4257 affects IBM DB2 UDB prior to 8.1 FixPak 13. A remote authenticated attacker can cause a denial-of-service (crash) by (1) sending the first ACCSEC command without an RDBNAM parameter during the CONNECT process, or (2) sending a crafted SQLJRA packet, which results in a NULL dereferen...

CVE-2005-4257

The CVE-2005-4257 issue affects Linksys WRT54GS and BEFW11S4 devices. The vulnerability is triggered by an IP packet with identical source and destination IPs and ports and the SYN flag set (LAND), which can cause the device to crash and result in a denial of service. The description notes that t...