Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 96923 - media-video/{helix|real}player heap overflow
Summary: media-video/{helix|real}player heap overflow
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Other
: High major (vote)
Assignee: Gentoo Security
URL: http://service.real.com/help/faq/secu...
Whiteboard: A2 [glsa] jaervosz
Keywords:
Depends on:
Blocks:
 
Reported: 2005-06-23 23:18 UTC by Sune Kloppenborg Jeppesen (RETIRED)
Modified: 2005-07-06 06:51 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-06-23 23:18:54 UTC 
A vulnerability exists when handling RealText that can result in a heap overflow.
Comment 1 Thierry Carrez (RETIRED) gentoo-dev 2005-06-24 01:18:15 UTC 
Upgrade to realplayer-10.0.5 and helixplayer-1.0.5 is necessary.
Comment 2 Diego Elio Pettenò (RETIRED) gentoo-dev 2005-06-24 04:22:46 UTC 
It doesn't seems to be released yet (also if Real's security advisory states 
else).
Comment 3 Diego Elio Pettenò (RETIRED) gentoo-dev 2005-06-24 15:09:29 UTC 
Ok committed 1.0.5 and 10.0.5. Little problem: I can't test helixplayer here 
as it's x86-only so I dropped the keywords until someone can test it.
Comment 4 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-06-24 15:30:46 UTC 
Thx Diego, 
 
x86 please test and mark   
helixplayer-1.0.5 ~x86  
realplayer-10.0.5 x86
Comment 5 Thierry Carrez (RETIRED) gentoo-dev 2005-06-27 01:19:20 UTC 
x86 testing: see above comment.
Comment 6 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-07-05 01:55:32 UTC 
x86/someone please test and mark stable ASAP.
Comment 7 John Mylchreest (RETIRED) gentoo-dev 2005-07-06 03:04:45 UTC 
marked ~x86
Comment 8 Henrik Brix Andersen 2005-07-06 04:40:42 UTC 
Tested realplayer-10.0.5 and marked stable on x86 on request from jaervosz.
Comment 9 Thierry Carrez (RETIRED) gentoo-dev 2005-07-06 05:52:14 UTC 
Thx everyone, ready for GLSA
Comment 10 Thierry Carrez (RETIRED) gentoo-dev 2005-07-06 06:51:24 UTC 
GLSA 200507-04