LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

LWN.net Weekly Edition for August 28, 2008

Fedora, Red Hat, and distributor security

LWN.net Weekly Edition for August 21, 2008

Standards, the kernel, and Postfix

In defense of Ubuntu

Printable page
Weekly edition Kernel Security Distributions Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ

HelixPlayer: arbitrary code execution

Package(s):HelixPlayer CVE #(s):CVE-2007-3410
Created:June 27, 2007 Updated:September 17, 2007
Description: A buffer overflow flaw was found in the way HelixPlayer processed Synchronized Multimedia Integration Language (SMIL) files. It was possible for a malformed SMIL file to execute arbitrary code with the permissions of the user running HelixPlayer. (CVE-2007-3410)
Alerts:
Gentoo 200709-05 2007-09-14
Red Hat RHSA-2007:0841-01 2007-08-17
Fedora FEDORA-2007-0756 2007-06-29
Red Hat RHSA-2007:0605-01 2007-06-27
(Log in to post comments)

HelixPlayer: arbitrary code execution

Posted Sep 14, 2007 6:51 UTC (Fri) by kreutzm (subscriber, #4700) [Link]

Debian Sarge and Etch are not vulnerable.

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds