macnn

07/28/2008, 11:00am, EDT

Monday, July 28th

Real patches critical RealPlayer vulnerabilities

Real has fixed four "highly critical" security issues spread across the Mac, Windows and Linux versions of RealPlayer, according to a Secunia report. While two of the vulnerabilities are Windows-only, in that they relate to ActiveX controls, at least one is known to be universal. In this a design flaw is said to exist within the handling of frames in Shockwave Flash files, which in an unpatched copy of the software, could be used to create a heap-based buffer overflow.

The last vulnerability is described only as an "unspecified error," which could be used to "reference local resources." Affected Mac versions of RealPlayer include v10 and v10.1; both Secunia and Real recommend upgrading to v11 to solve the problem.


Filed under: security, software
Other story tags: Flash, Real

, , 2comments, del.icio.us, slashdot, digg, buzz


2 comments
Reader Reactions (Please use <i></i> for italic text)

subscribe to comments
for this article




Expand All   Global Settings

Real?

1
07/28, 1:03pm, EDT

What is Real Player?

Fresh-Faced Recruit
Joined Sep 2003
User is offline

re: Real?

0
07/28, 2:06pm, EDT

Real is a commercial company that produced proprietary formats for audio and video content on the Internet. It is a longtime competitor for QuickTime and Windows Media in the area of Internet-based media content. You may find its website here:

http://www.real.com/

Fresh-Faced Recruit
Joined Feb 2000
User is offline
Your Comments

In order to post comments: If you are a registered member, please login with your MacNN Forums username and password otherwise please uncheck the checkbox below.


Registered Member?
macnn forums login:

macnn forums password:

Not a member of the MacNN forums? Register now for free.

RSS Feeds

Have the latest content delivered to your desktop via RSS. Use the links below to get access to a specific blog, news, or reviews feed.



  MacNN -all

  MacNN Reviews

  MacNN Podcasts

  iPodNN

  Electronista

  Left Lane News

Convert PDF to Word: Easily Convert PDF to Word Doc, Excel, and More. Fast and Accurate. No Registration Trial

Check Out the VIERA from Panasonic!: Enter a New Visual Era with Panasonic VIERA HDTVs. An Enhanced Experience.

NewsGator Enterprise RSS: Improve Corporate Communication via Web 2.0, RSS, and Social Computing.

Get an IT Degree Online: Get solid credentials. Take your hobby to the next level. Adult Programs. Affordable.

Buy from The Apple Store, iTunes.com, Amazon.com, TechDepot, OfficeDepot, Computers4Sure, or donate.