Debian: 826-1 Critical: Helix-Player Remote Code Execution Risk

Buffer overflow in the RealText parser could allow remote code
execution via a specially crafted RealMedia file with a long
RealText string.

CAN-2005-2710

Format string vulnerability in Real HelixPlayer and RealPlayer 10
allows remote attackers to execute arbitrary code via the image
handle attribute in a RealPix (.rp) or RealText (.rt) file.

For the stable distribution (sarge), these problems have been fixed in
version 1.0.4-1sarge1

For the unstable distribution (sid), these problems have been fixed in
version 1.0.6-1

We recommend that you upgrade your helix-player package.


Upgrade Instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You ...