CVE-2005-2710

NameCVE-2005-2710
DescriptionFormat string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-826-1
NVD severitymedium (attack range: remote)
Debian Bugs330364

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
helix-playersource(unstable)1.0.6-1high330364
helix-playersourcesarge1.0.4-1sarge1highDSA-826-1

Notes

see  http://www.open-security.org/advisories/13

Search for package or bug name: Reporting problems