X

RealPlayer security upgrade available

Media player vendor rushes out a point upgrade in response to a critical vulnerability disclosure.

Robert Vamosi Former Editor
As CNET's former resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security.
See full bio
Robert Vamosi

Security vendor Secunia on Tuesday reported a partial fix for a critical vulnerability it first reported last week affecting the RealPlayer software used to play media within Internet browsers on Windows, Mac, and Linux systems.

Secunia disclosed a critical vulnerability within the rmoc3260 ActiveX control in RealPlayer 11 (11.0.0 - 11.0.2 builds 6.0.14.738 - 6.0.14.802), 10.5 (6.0.12.1040-6.0.12.1663, 6.0.12.1698, 6.0.12.1741), and RealPlayer 10 on Windows;RealPlayer 10.1 (10.0.0.396 - 10.0.0.503) and 10 (10.0.0.305 - 352) on Mac; and RealPlayer 10 on Linux.

Specially crafted Shockwave files could lead to a buffer overflow, which could cause memory corruption under certain circumstances and allow a remote attacker to expose sensitive information on a compromised machine.

In response, Real has made upgrades available for its Windows, Mac and Linux products.