Red Hat セキュリティアドバイザリ 2007:0605 から：

バッファオーバーフローの欠陥を修正する更新済みの HelixPlayer パッケージが現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新には重大なセキュリティインパクトがあるものとして評価しています。

HelixPlayer は Media Player です。

HelixPlayer が Synchronized Multimedia Integration Language（SMIL）ファイルを処理する方法でバッファオーバーフローの欠陥が見つかりました。無効な形式の SMIL ファイルが、HelixPlayer を実行しているユーザーの権限で任意のコードを実行する可能性があります。(CVE-2007-3410)

HelixPlayer のすべてのユーザーは、バックポートされたパッチが含まれる、この問題に対して脆弱ではない、この更新済みのパッケージにアップグレードすることが推奨されます。

HelixPlayer が Synchronized Multimedia Integration Language（SMIL）ファイルを処理する方法でバッファオーバーフローの欠陥が見つかりました。無効な形式の SMIL ファイルが、HelixPlayer を実行しているユーザーの権限で任意のコードを実行する可能性があります。（CVE-2007-3410）

An updated HelixPlayer package that fixes a buffer overflow flaw is now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

HelixPlayer is a media player.

A buffer overflow flaw was found in the way HelixPlayer processed Synchronized Multimedia Integration Language (SMIL) files. It was possible for a malformed SMIL file to execute arbitrary code with the permissions of the user running HelixPlayer. (CVE-2007-3410)

All users of HelixPlayer are advised to upgrade to this updated package, which contains a backported patch and is not vulnerable to this issue.

From Red Hat Security Advisory 2007:0605 :

An updated HelixPlayer package that fixes a buffer overflow flaw is now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

HelixPlayer is a media player.

A buffer overflow flaw was found in the way HelixPlayer processed Synchronized Multimedia Integration Language (SMIL) files. It was possible for a malformed SMIL file to execute arbitrary code with the permissions of the user running HelixPlayer. (CVE-2007-3410)

All users of HelixPlayer are advised to upgrade to this updated package, which contains a backported patch and is not vulnerable to this issue.

The remote host is affected by the vulnerability described in GLSA-200709-05 (RealPlayer: Buffer overflow)

    A stack-based buffer overflow vulnerability has been reported in the     SmilTimeValue::parseWallClockValue() function in smlprstime.cpp when     handling HH:mm:ss.f type time formats.
  Impact :

    By enticing a user to open a specially crafted SMIL (Synchronized     Multimedia Integration Language) file, an attacker could be able to     execute arbitrary code with the privileges of the user running the     application.
  Workaround :

    There is no known workaround at this time.

來自 Red Hat 安全性公告 2007:0605：

現已提供更新版 HelixPlayer 套件，可修正一個緩衝區溢位瑕疵。

Red Hat 安全性回應團隊已將此更新評等為具有重大安全性影響。

HelixPlayer 是 Media Player。

在 HelixPlayer 處理同步多媒體整合語言 (SMIL) 檔案的方式中發現緩衝區溢位瑕疵。格式錯誤的 SMIL 檔案能夠以執行 HelixPlayer 的使用者權限執行任意程式碼。(CVE-2007-3410)

建議所有 HelixPlayer 使用者皆升級至此更新版套件，其中包含一個反向移植修補程式，且不易受此問題的影響。

An updated RealPlayer package that fixes a security flaw is now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

RealPlayer is a media player that provides media playback locally and via streaming.

A buffer overflow flaw was found in the way RealPlayer processed Synchronized Multimedia Integration Language (SMIL) files. It was possible for a malformed SMIL file to execute arbitrary code with the permissions of the user running RealPlayer. (CVE-2007-3410)

All users of RealPlayer are advised to upgrade to this updated package containing RealPlayer version 10.0.9 which is not vulnerable to this issue.

According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise on the remote Windows host suffers from several buffer overflows involving specially crafted media files (eg, '.mp3', '.rm', '.SMIL', '.swf', '.ram', and '.pls'). If an attacker can trick a user on the affected system into opening such a file or browsing to a specially crafted web page, he may be able to exploit one of these issues to execute arbitrary code subject to the user's privileges on the affected host.

来自 Red Hat 安全公告 2007:0605：

更新后的 HelixPlayer 程序包修复了一个缓冲区溢出缺陷，现在可用。

Red Hat 安全响应团队将此更新评级为具有严重安全影响。

HelixPlayer 是一款媒体播放器。

在 HelixPlayer 处理同步多媒体集成语言 (SMIL) 文件的方式中发现缓冲区溢出缺陷。可能让畸形 SMIL 文件以运行 HelixPlayer 的用户的权限执行任意代码。(CVE-2007-3410)

建议所有 HelixPlayer 用户升级此更新后的程序包，其中包含向后移植的修补程序，不易受到此问题的影响。

在 HelixPlayer 處理同步多媒體整合語言 (SMIL) 檔案的方式中發現緩衝區溢位瑕疵。格式錯誤的 SMIL 檔案能夠以執行 HelixPlayer 的使用者權限執行任意程式碼。(CVE-2007-3410)

在 HelixPlayer 处理同步多媒体集成语言 (SMIL) 文件的方式中发现缓冲区溢出缺陷。可能让畸形 SMIL 文件以运行 HelixPlayer 的用户的权限执行任意代码。(CVE-2007-3410)

A buffer overflow flaw was found in the way HelixPlayer processed Synchronized Multimedia Integration Language (SMIL) files. It was possible for a malformed SMIL file to execute arbitrary code with the permissions of the user running HelixPlayer. (CVE-2007-3410)

According to its build number, the installed version of RealPlayer on the remote Windows host contains a stack-based buffer overflow that can be triggered by a specially crafted SMIL file, perhaps accessed over the web using the CLSID 'CFCDAA03-8BE4-11cf-B84B-0020AFBBCCFA'.
A remote attacker may be able to exploit this issue to execute arbitrary code subject to the user's privileges on the affected host.

Secunia reports :

Multiple vulnerabilities have been reported in RealPlayer/RealOne/HelixPlayer, which can be exploited by malicious people to compromise a user's system.

An input validation error when processing .RA/.RAM files can be exploited to cause a heap corruption via a specially crafted .RA/.RAM file with an overly large size field in the header.

An error in the processing of .PLS files can be exploited to cause a memory corruption and execute arbitrary code via a specially crafted .PLS file.

An input validation error when parsing .SWF files can be exploited to cause a buffer overflow via a specially crafted .SWF file with malformed record headers.

A boundary error when processing rm files can be exploited to cause a buffer overflow.

A buffer overflow flaw was discovered in the way RealPlayer and HelixPlayer handle the wallclock variable in Synchronized Multimedia Integration Language (SMIL) files.

More information regarding this flaw can be found here:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=5 47

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
67538	Oracle Linux 4 : HelixPlayer (ELSA-2007-0605)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
60220	Scientific Linux セキュリティ更新：SL4.x i386/x86_64 の HelixPlayer	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
25614	CentOS 4 : HelixPlayer (CESA-2007:0605)	Nessus	CentOS Local Security Checks	2007/6/29	2021/1/4	high
25624	RHEL 4 : HelixPlayer (RHSA-2007:0605)	Nessus	Red Hat Local Security Checks	2007/6/29	2021/1/14	high
67538	Oracle Linux 4 : HelixPlayer (ELSA-2007-0605)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
26095	GLSA-200709-05 : RealPlayer: Buffer overflow	Nessus	Gentoo Local Security Checks	2007/9/24	2021/1/6	high
67538	Oracle Linux 4 : HelixPlayer (ELSA-2007-0605)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
40707	RHEL 3 / 4 / 5 : RealPlayer (RHSA-2007:0841)	Nessus	Red Hat Local Security Checks	2009/8/24	2021/1/14	high
27591	RealPlayer for Windows < Build 6.0.12.1662 Multiple Vulnerabilities	Nessus	Windows	2007/10/30	2018/11/15	high
67538	Oracle Linux 4：HelixPlayer (ELSA-2007-0605)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
60220	Scientific Linux 安全性更新：HelixPlayer on SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
60220	Scientific Linux 安全更新：SL4.x i386/x86_64 中的 HelixPlayer	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
60220	Scientific Linux Security Update : HelixPlayer on SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
25573	RealPlayer for Windows < Build 6.0.12.1578 Multiple Vulnerabilities	Nessus	Windows	2007/6/27	2018/11/15	high
29866	FreeBSD : linux-realplayer -- multiple vulnerabilities (f762ccbb-baed-11dc-a302-000102cc8983)	Nessus	FreeBSD Local Security Checks	2008/1/7	2021/1/6	high
27679	Fedora 7 : HelixPlayer-1.0.7-6.fc7 (2007-0756)	Nessus	Fedora Local Security Checks	2007/11/6	2021/1/11	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high