[helix-maintainers] Bug#340270: helix-player: CVE-2005-2629, CVE-2005-2630: Do these vulnerabilities affect Helix as well?

[Moritz Muehlenhoff]

Package: helix-player
Severity: grave
Tags: security
Justification: user security hole

There's been an eeye advisory about several serious security problems in
Real Player: http://www.eeye.com/html/research/advisories/AD20051110b.html

According to some other security web sites Helix player might be affected
as well: http://www.frsirt.com/english/advisories/2005/2385

As some Real Player vulnerabilities in the past affected Helix as well
this could be correct, can you confirm it?

Cheers,
        Moritz

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14-2-686
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15 at euro (charmap=ISO-8859-15)