Oracle Linux 4 : HelixPlayer (ELSA-2007-0605)

From Red Hat Security Advisory 2007:0605 : An updated HelixPlayer package that fixes a buffer overflow flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A buffer overflow flaw was found in the...

Fedora Update for HelixPlayer FEDORA-2007-0756

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200709-05 (realplayer)

The remote host is missing updates announced in advisory GLSA 200709-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200709-05 (realplayer)

The remote host is missing updates announced in advisory GLSA 200709-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical: Red Hat Security Advisory: RealPlayer security update

An updated RealPlayer package that fixes a security flaw is now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player that provides media...

RealPlayer SMIL file wallclock buffer overflow

Added: 06/29/2007 CVE: CVE-2007-3410 BID: 24658 OSVDB: 37374 Background RealPlayer includes support for Synchronized Multimedia Integration Language SMIL files. Problem A buffer overflow vulnerability in the wallclock function could allow command execution upon opening a specially crafted SMIL...

RHEL 4 : HelixPlayer (RHSA-2007:0605)

An updated HelixPlayer package that fixes a buffer overflow flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A buffer overflow flaw was found in the way HelixPlayer processed Synchronized...

RealPlayer/HelixPlayer ParseWallClockValue函数栈缓冲区溢出漏洞

BUGTRAQ ID: 24658 CVECAN ID: CVE-2007-3410 RealPlayer是一款非常流行的媒体播放器，支持多种格式；HelixPlayer是其开源版本。 RealPlayer/HelixPlayer播放器的墙壁时钟在处理日期格式时存在缓冲区漏洞，远程攻击者可能利用此漏洞控制用户机器。 墙壁时钟（wallclock）功能没有正确地处理HH:mm:ss.f时间格式： 924 HXRESULT 925 SmilTimeValue::parseWallClockValueREFconst char pCh 926 ... 957 char buf10; /...

Critical: HelixPlayer security update

1.0.6-0.EL4.2.0.2 - Rebuild for z-stream bz245842 1.0.6-0.EL4.2 - Add a fix for CVE-2007-3410...

RealPlayer for Windows < Build 6.0.12.1578 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host contains a stack-based buffer overflow that can be triggered by a specially crafted SMIL file, perhaps accessed over the web using the CLSID 'CFCDAA03-8BE4-11cf-B84B-0020AFBBCCFA'. A remote attacker may ...

DSquare Exploit Pack: D2SEC_REAL_WALLCLOCK

Name| d2secrealwallclock ---|--- CVE| CVE-2007-3410 Exploit Pack| D2ExploitPack Description| RealPlayer ParseWallClockValue Stack Overflow Vulnerability Notes|...

CVE-2007-3410

CVE-2007-3410 describes a stack-based buffer overflow in RealPlayer/HelixPlayer when parsing SMIL wallclock values in SmilTimeValue::parseWallClockValue. This allows remote attackers to execute arbitrary code by feeding a crafted SMIL file with a long wallclock value. The issue affects RealPlayer...