RealNetworks Patches Media Player Flaws

Security hole could have allowed hackers to run arbitrary code on a user's computer.

Security flaws in RealNetworks' media player software could allow attackers to run arbitrary code on a user's computer, the company warned last week.

Three vulnerabilities exist in the Windows versions of the RealOne Player and RealPlayer, according to a statement on RealNetworks' Web site.

By encouraging a RealOne or RealPlayer user to download a malformed file, an attacker could run code of his choice on a user's system, according to a security advisory sent by Next Generation Security Software of Sutton, England, to the NTBugtraq mailing list on Friday.

Finding Flaws

Next Generation Security Software said it discovered the flaws and informed RealNetworks on November 1. It is common for security firms to release their own bulletin after the software maker fixes the problem.

RealNetworks, of Seattle, recommends users install a patch to fix the software, although there are no reports so far of attacks using the exploit.

The Next Generation Security Software advisory is available online.

The RealNetworks statement is available on Real's Web site.

See more like this:
RealNetworks,
media,
player,
RealOne,
RealPlayer,
audio,
security,
flaw,
NTBugtraq

Would you recommend this story? YES NO

Recommend:
0 Comments

Subscribe to the High-Tech at Home Newsletter - weekly

See All Newsletters »

Lenovo Laptop Deals

ThinkPad Edge E420 Lenovo Style in an Affordable Package
Buy now direct from Lenovo
ThinkPad X220 Fast and light, with great input ergonomics and battery life, this powerhouse ultraportable is best-of-breed.
Buy now direct from Lenovo
ThinkPad X120e One of the best netbooks ever, X120e has the best netbook keyboard ever--nothing else comes close
Buy now direct from Lenovo

Name	City

Address 1	State	Zip

Address 2	E-mail (optional)