Red Hat Security Update: HelixPlayer

Red Hat announced one new critical security update this morning.

RHSA-2007:0605 Critical: HelixPlayer security update

This security update fixes one vulnerability in the HelixPlayer packages for Red Hat Enterprise Linux 4. Due to a buffer overflow in the way HelixPlayer processed SMIL files, an attacker could use a malformed SMIL file to execute arbitrary code with the permissions of the user running HelixPlayer (CVE-2007-3410). The Red Hat Security Response Team has rated this update as having critical security impact.