macnn

07/29/2008, 2:35pm, EDT

Tuesday, July 29th

Security issues found in RealPlayer 10 for Mac

RealNetworks is urging Mac users to upgrade to version 11.0 of its RealPlayer application, due to a potential security exploit. The malware research site Secunia rates the problem as "highly critical," with potential risk of malicious system access and exposure of sensitive information. The vulnerability affects Realplayer v10 and v10.1 for Mac OS X. The company did not issue a patch, but is instead urging users to upgrade to RealPlayer 11.0. The company says there is a problem with Realplayer's ActiveX import method buffer overflow.

An advisory posted by Secunia says an error in the ActiveX control could cause memory corruption under certain circumstances. Hackers could use this weakness to compromise a user's system. The problem also affects some versions of RealPlayer for Windows and Linux. RealPLayer 11.0 for Mac -- and updates for other platforms -- are available at no cost from RealNetwork's website.


Filed under: security, software
Other story tags: RealNetworks, malware

, , 7comments, del.icio.us, slashdot, digg, buzz


7 comments
Reader Reactions (Please use <i></i> for italic text)

subscribe to comments
for this article




Expand All   Global Settings

Audio broken in 11

0
07/29, 3:27pm, EDT

I use a MOTU firewire interface for audio playback and RP 11's audio does not work. The audio simply gurgles along and is completely unintelligible.

Who cares?

0
07/29, 3:30pm, EDT

I won't allow Real Player on any computer I use - PC or Mac. What a piece of shit!

Fresh-Faced Recruit
Joined Jan 2002
User is offline

But there is a problem!

0
07/29, 3:31pm, EDT

The problem with upgrading to RP 11 is that if you have a wireless internet connection, it will totally make your (Apple) laptop non-functional. I have posted over and over (including fixes) about these problems and none of them have been addressed yet by Real. For computers that aren't wireless, yes, it is a great upgrade. Everyone else should be very careful when deciding to upgrade to this release (build 884). You can check my posts on Versiontracker.

Fresh-Faced Recruit
Joined Jun 2003
User is offline

Avoid Real Player

0
07/29, 3:46pm, EDT

Free advice: avoid this player. Slow, clunky, annoying piece of adware - this what it was few years ago when I fired it up for the first and the last time.

Fresh-Faced Recruit
Joined Jan 2006
User is offline

Could be dangerous!

0
07/29, 5:20pm, EDT

Whew, thank goodness nobody uses Real! This could have been a serious problem.

Fresh-Faced Recruit
Joined Sep 2000
User is offline

Real is still exists?

0
07/30, 4:54pm, EDT

I didn't know that Real still existed. And I'm shocked that anyone allows their stuff on any computer.

Fresh-Faced Recruit
Joined Jun 2002
User is offline

Real is still exists?

0
07/30, 4:55pm, EDT

I didn't know that Real still existed. And I'm shocked that anyone allows their stuff on any computer.

Fresh-Faced Recruit
Joined Jun 2002
User is offline
Your Comments

In order to post comments: If you are a registered member, please login with your MacNN Forums username and password otherwise please uncheck the checkbox below.


Registered Member?
macnn forums login:

macnn forums password:

Not a member of the MacNN forums? Register now for free.

RSS Feeds

Have the latest content delivered to your desktop via RSS. Use the links below to get access to a specific blog, news, or reviews feed.



  MacNN -all

  MacNN Reviews

  MacNN Podcasts

  iPodNN

  Electronista

  Left Lane News

Convert PDF to Word: Easily Convert PDF to Word Doc, Excel, and More. Fast and Accurate. No Registration Trial

Check Out the VIERA from Panasonic!: Enter a New Visual Era with Panasonic VIERA HDTVs. An Enhanced Experience.

NewsGator Enterprise RSS: Improve Corporate Communication via Web 2.0, RSS, and Social Computing.

Get an IT Degree Online: Get solid credentials. Take your hobby to the next level. Adult Programs. Affordable.

Buy from The Apple Store, iTunes.com, Amazon.com, TechDepot, OfficeDepot, Computers4Sure, or donate.