Oval Definition:oval:com.redhat.rhsa:def:20050517
Revision Date:2005-06-23Version:502
Title:RHSA-2005:517: HelixPlayer security update (Critical)
Description:HelixPlayer is a media player.

A buffer overflow bug was found in the way HelixPlayer processes SMIL files. An attacker could create a specially crafted SMIL file, which when combined with a malicious web server, could execute arbitrary code when opened by a user. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-1766 to this issue.

All users of HelixPlayer are advised to upgrade to this updated package, which contains HelixPlayer version 10.0.5 and is not vulnerable to this issue.
Family:unixClass:patch
Status:Reference(s):CVE-2005-1766
RHSA-2005:517-01
Platform(s):Red Hat Enterprise Linux 4
Product(s):
Definition Synopsis
  • Red Hat Enterprise Linux 4 is installed
  • AND HelixPlayer is earlier than 1:1.0.5-0.EL4.1
  • AND HelixPlayer is signed with Red Hat master key
  • BACK