HelixPlayer is a media player.
A stack based buffer overflow bug was found in HelixPlayer’s Synchronized
Multimedia Integration Language (SMIL) file processor. An attacker could
create a specially crafted SMIL file which would execute arbitrary code
when opened by a user. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-0455 to this issue.
A buffer overflow bug was found in the way HelixPlayer decodes WAV files.
An attacker could create a specially crafted WAV file which could execute
arbitrary code when opened by a user. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2005-0611 to
this issue.
All users of HelixPlayer are advised to upgrade to this updated package,
which contains HelixPlayer 1.0.3 which is not vulnerable to these
issues.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | any | i386 | helixplayer | < 1.0.3-1 | HelixPlayer-1.0.3-1.i386.rpm |
RedHat | any | ppc | helixplayer | < 1.0.3-1 | HelixPlayer-1.0.3-1.ppc.rpm |
RedHat | any | src | helixplayer | < 1.0.3-1 | HelixPlayer-1.0.3-1.src.rpm |