Quantcast
Subscribe to magazine

RealNetworks Warns of Media Player Flaws

Vulberabilities could allow an attacker to take control of your PC.

Gillian Law, IDG News Service

  • 0 Yes
  • 0 No

RealNetworks' media player software contains vulnerabilities that could let an attacker take control of a PC on which the software is used to download multimedia files, the company confirms.

Corrupt files posing as normal music and video files could allow an attacker to gain control of the downloader's computer, the company says. However, RealNetworks stresses in a statement that, as far as it is aware, this has not yet happened.

There are three vulnerabilities: files could be created that will open a Web site on the user's browser, from where remote Javascript can be operated; files could be created that let the attacker download and use their code on a user's machine; or media files can be created that will create buffer overrun errors.

Updates Available

The problems have been fixed, and users are advised to download updates from the company's site, it says.

The affected software is: RealOne Player, RealOne Player v2 for Windows only (all languages), RealOne Player 8, RealPlayer 10 Beta (English only), and RealOne Enterprise Desktop or RealPlayer Enterprise (all versions, standalone and as configured by the RealOne Desktop Manager or RealPlayer Enterprise Manager).

The vulnerabilities were discovered in December by Next Generation Security Software (NGSS), in Sutton, England. RealNetworks responded reasonably quickly to the discovery, a spokesperson for NGSS says.

"Some vendors take up to a year," he says.

  • Recommend this story?
  • 0 Yes
    0 No
 

Featured APC Accessories

  • APC Back-UPS ES Safeguards your equipment from damaging surges and spikes that travel along your utility & data lines.
  • APC SurgeArrest Performance Highest level of protection for your professional computers, electronics and connected devices, as well as provides surge protection.

People who read this also read:

  • 15 Minutes to a Secure Business Get the Secure in 15 toolkit starting with the "15 Minutes Month-at-a-Glance" calendar. McAfee will send you additional tools and tricks to stay protected around the clock.
  • A Buyer's Guide to Data Protection Implementing data protection products and processes can be daunting. Make the right decisions by exploring what is available and what makes sense for your organization. Use this simple guide to evaluate different vendor offerings.

Sponsored Links