|
|
>> Debian Security Update Fixes Helix Player Buffer Overflow Vulnerability
|
Title : Debian Security Update Fixes Helix Player Buffer Overflow Vulnerability VUPEN ID : VUPEN/ADV-2005-2695 CVE ID : CVE-2005-2629
Rated as : Critical 
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2005-12-02
|
|
Debian has released updated packages to address a vulnerability identified in Helix Player. This flaw is due to a stack overflow error when processing a malformed data packet contained in a Real Media file, which could be exploited by remote attackers to compromise a vulnerable system by convincing a user to visit a malicious Web page hosting a specially crafted ".rm" file. For additional information, see : VUPEN/ADV-2005-2688
ChangeLog
2005-12-02 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|