Bug 150048

Summary:	HelixPlayer Vuln (CAN-2005-0455)
Product:	[Fedora] Fedora	Reporter:	Jeff Moe (jebba) <moe>
Component:	HelixPlayer	Assignee:	John (J5) Palmieri <johnp>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	high
Version:	3	CC:	jkeck
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-03-14 18:55:29 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	150101, 150105
Bug Blocks:

Description Jeff Moe (jebba) 2005-03-01 22:30:49 UTC

Description of problem:
A couple buffer overflows.

http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities
http://service.real.com/help/faq/security/050224_player/EN/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0455

Version-Release number of selected component (if applicable):
HelixPlayer-1.0.1.gold-6.i386.rpm

Additional info:
HelixPlayer 1.0.2, with fixes for these exploits, is available at:
https://player.helixcommunity.org/2004/downloads/

Comment 1 Colin Walters 2005-03-02 04:46:29 UTC

As far as I know 1.0.2 does not fix the issues; they are solved in a pending
1.0.3.  Once that appears I'll upload it.

Comment 2 Ray Strode [halfline] 2005-03-14 18:55:29 UTC

This was fixed in an FC3 update. Closing...