RealNetworks patches security flaw in RealPlayer 10

RealNetworks has issued patches for security holes in its RealPlayer media software, which offers near-DVD quality viewing, full screen viewing, and playback of all QuickTime-compatible files. The company says the patch address a security vulnerability that could allow attackers to run unauthorized applications on users' computers. Affecting Windows, Mac and Linux platforms, the bug could allow an attacker to create a malicious RealMedia file to cause a heap overflow, which in turn could allow the execution of arbitrary code on a customer's machine. The company says it affects Mac RealPlayer 10 as well as well as the older Mac RealOne Player. RealNetworks recommends users upgrade to the latest version to resolve the security risk, posting a new version for download. [free registration required to download]

Filed under: software

, 2

2 comments

Reader Reactions (Please use <i></i> for italic text)

subscribe to comments
for this article

Expand All

Global Settings

testudo

flaw?

06/27, 10:07am, EDT

I thought realplayer was a flaw...

Fresh-Faced Recruit

Joined Aug 2001

User is offline

macevangelist

Same version, build, time

06/28, 5:18am, EDT

The version of this release is still 10.0.0 and the build number is still 331. The creation and modification date is still February 11, 2005 9:03 AM. So would you say they posted a new version for download? Oh sure, they just set back their clocks to do another build.

Anyway, it would have been nice if readers were told that they have to: 1. Go the RealPlayer menu. 2. Choose Check for Update. 3. Select the box next to the "Security Update - June 2005" component. 4. Click Install to download and install the update.

So downloading the RealPlayer yet again makes no sense if you already have 10.0.0 build 331.

Fresh-Faced Recruit

Joined Jun 2005

User is offline

Your Comments