Red Hat Security Advisory

RHSA-2010:0981

HelixPlayer removal

Released 2010-12-14 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AS version 4 HelixPlayer-1:1.0.6-3.el4_8.1, HelixPlayer-uninstall-1:1.0.6-3.el4_8.1.i386, HelixPlayer-uninstall-1:1.0.6-3.el4_8.1.ppc
Red Hat Enterprise Linux Desktop version 4 HelixPlayer-1:1.0.6-3.el4_8.1, HelixPlayer-uninstall-1:1.0.6-3.el4_8.1.i386
Red Hat Enterprise Linux ES version 4 HelixPlayer-1:1.0.6-3.el4_8.1, HelixPlayer-uninstall-1:1.0.6-3.el4_8.1.i386
Red Hat Enterprise Linux WS version 4 HelixPlayer-1:1.0.6-3.el4_8.1, HelixPlayer-uninstall-1:1.0.6-3.el4_8.1.i386

Fixes 10 records

TI-2010-04125 CVE-2010-4392 · GHSA-fwwr-mh49-42xf

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP…

MEDIUM 49

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other vers…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06301 Published 2010-12-14 Fixed CWE-119

TI-2010-04117 CVE-2010-4384 · GHSA-97j2-qfcm-f8wh

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise…

MEDIUM 49

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remot…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.058 Published 2010-12-14 Fixed CWE-20

TI-2010-04111 CVE-2010-4378 · GHSA-823r-m433-5jp9

The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through…

MEDIUM 49

The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05683 Published 2010-12-14 Fixed CWE-119

TI-2010-04108 CVE-2010-4375 · GHSA-v5c6-8332-w725

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer…

MEDIUM 49

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execu…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0629 Published 2010-12-14 Fixed CWE-119

TI-2010-02868 CVE-2010-2997 · GHSA-4mw4-jp5f-4h89

Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP…

MEDIUM 49

Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other version…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05683 Published 2010-12-14 Fixed CWE-399

TI-2010-04119 CVE-2010-4386 · GHSA-q39j-mm6g-6jg5

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux…

MEDIUM 47

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allow remote attackers to execute arbitrary code or cause a den…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04348 Published 2010-12-14 Fixed CWE-119

TI-2010-04116 CVE-2010-4383 · GHSA-pq35-g3gc-7vg7

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP…

MEDIUM 46

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 12.0.0.1444, Linux RealPlayer 11.0.2.1744, and possibly H…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03069 Published 2010-12-14 Fixed CWE-119

TI-2010-04115 CVE-2010-4382 · GHSA-mccv-jqp5-6vx4

Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1…

MEDIUM 46

Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other vers…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03069 Published 2010-12-14 Fixed CWE-119

TI-2010-04112 CVE-2010-4379 · GHSA-8267-gm3r-x6g6

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP…

MEDIUM 46

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPla…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03032 Published 2010-12-14 Fixed CWE-119

TI-2010-04118 CVE-2010-4385 · GHSA-2f74-hjc3-cgqp

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through…

MEDIUM 45

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0284 Published 2010-12-14 Fixed CWE-189