Red Hat Security Advisory

RHSA-2010:0094

HelixPlayer security update

Released 2010-02-09 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AS version 4 HelixPlayer-1:1.0.6-1.el4_8.1, HelixPlayer-1:1.0.6-1.el4_8.1.i386, HelixPlayer-1:1.0.6-1.el4_8.1.ppc
Red Hat Enterprise Linux Desktop version 4 HelixPlayer-1:1.0.6-1.el4_8.1, HelixPlayer-1:1.0.6-1.el4_8.1.i386
Red Hat Enterprise Linux ES version 4 HelixPlayer-1:1.0.6-1.el4_8.1, HelixPlayer-1:1.0.6-1.el4_8.1.i386
Red Hat Enterprise Linux WS version 4 HelixPlayer-1:1.0.6-1.el4_8.1, HelixPlayer-1:1.0.6-1.el4_8.1.i386

Fixes 8 records

TI-2009-04041 CVE-2009-4257 · GHSA-3gv9-4xxv-89c6

Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in…

MEDIUM 51

Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, M…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08491 Published 2010-01-25 Fixed CWE-119

TI-2009-04026 CVE-2009-4242 · GHSA-x57c-5473-xjq4

Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in…

MEDIUM 51

Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08453 Published 2010-01-25 Fixed CWE-119

TI-2009-04032 CVE-2009-4248 · GHSA-wxc4-9pgw-f83x

Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in…

MEDIUM 50

Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0681 Published 2010-01-25 Fixed CWE-119

TI-2009-04031 CVE-2009-4247 · GHSA-9h7f-xvfq-hm25

Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10…

MEDIUM 50

Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.x; RealPlayer SP 1.0.0 and 1.0.1; RealPlayer Enterprise; Mac Re…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0681 Published 2010-01-25 Fixed CWE-119

TI-2009-04029 CVE-2009-4245 · GHSA-89x4-gm7p-7fr8

Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040…

MEDIUM 50

Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0681 Published 2010-01-25 Fixed CWE-119

TI-2010-04109 CVE-2010-4376 · GHSA-5p9m-hxc7-hpwp

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP…

MEDIUM 49

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary co…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0629 Published 2010-12-14 Fixed CWE-119

TI-2010-00394 CVE-2010-0416 · GHSA-mcf9-pq3p-q6q8

Buffer overflow in the Unescape function in common/util/hxurl.cpp and…

MEDIUM 46

Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.1132 Published 2010-02-18 Fixed CWE-119

TI-2010-00395 CVE-2010-0417 · GHSA-hvpw-g59w-9xjx

Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows…

LOW 30

Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04153 Published 2010-02-18 Fixed CWE-119