dbea78a1__of_Red_Hat_Enterprise_Linux_4__Description
[Vulnerabilities] CVE-2005-2710 [Description] 
An exploit for a format-string vulnerability in HelixPlayer. An attacker could create a carefully crafted media file that would execute arbitrary code when opened by a victim. Since HelixPlayer can be embedded within a web browser, this flaw could be triggered by a victim simply visiting a malicious web page. Any code execution would however be limited to being run with the same rights as the user that is running the vulnerable browser.
Red Hat Magazine | Risk report: Two years of Red Hat Enterprise Linux 4
Description