|
|
>> Fedora Security Update Fixes HelixPlayer Remote Command Execution Vulnerability
|
Title : Fedora Security Update Fixes HelixPlayer Remote Command Execution Vulnerability
VUPEN ID : VUPEN/ADV-2007-2396
CVE ID : CVE-2007-3410
Rated as : Critical 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-07-02
|
A vulnerability has been identified in Fedora, which could be exploited by attackers to cause a denial of service or execute arbitrary code. This issue is caused by an error in HelixPlayer. For additional information, see : VUPEN/ADV-2007-2339
Affected Products
Fedora 7
Solution
Upgrade the affected package :
a270979cff90fefd8adf74e6f1dae1039d0fbdae HelixPlayer-plugin-1.0.7-6.fc7.i386.rpm
65335babaa60fd06ff46cc55fc8bff762073fa03 HelixPlayer-debuginfo-1.0.7-6.fc7.i386.rpm
afaaea61c7532366ec0ade929596a150a456ac2d HelixPlayer-1.0.7-6.fc7.i386.rpm
9e21e795c5c99950f730cc8e31220d888b6101a7 HelixPlayer-plugin-1.0.7-6.fc7.ppc.rpm
5039a5f16b6eb2cb63ea564665b70e0a3c5cc6ba HelixPlayer-debuginfo-1.0.7-6.fc7.ppc.rpm
ee2aa0d773f10c054afdba783dac7d7758ab66d1 HelixPlayer-1.0.7-6.fc7.ppc.rpm
bb8fa664c2f34c3d5e20aa957a8af6e7a5cdc1f8 HelixPlayer-1.0.7-6.fc7.src.rpm
References
http://www.vupen.com/english/advisories/2007/2396
https://www.redhat.com/archives/fedora-package-announce/2007-June/msg00666.html
ChangeLog
2007-07-02 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
