RealPlayer security upgrade available

Media player vendor rushes out a point upgrade in response to a critical vulnerability disclosure.

Security vendor Secunia on Tuesday reported a partial fix for a critical vulnerability it first reported last week affecting the RealPlayer software used to play media within Internet browsers on Windows, Mac, and Linux systems.

Secunia disclosed a critical vulnerability within the rmoc3260 ActiveX control in RealPlayer 11 (11.0.0 - 11.0.2 builds 6.0.14.738 - 6.0.14.802), 10.5 (6.0.12.1040-6.0.12.1663, 6.0.12.1698, 6.0.12.1741), and RealPlayer 10 on Windows;RealPlayer 10.1 (10.0.0.396 - 10.0.0.503) and 10 (10.0.0.305 - 352) on Mac; and RealPlayer 10 on Linux.

Specially crafted Shockwave files could lead to a buffer overflow, which could cause memory corruption under certain circumstances and allow a remote attacker to expose sensitive information on a compromised machine.

In response, Real has made upgrades available for its Windows, Mac and Linux products.

Tags:
Security
About the author

    As CNET's former resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security.

     

    Discuss RealPlayer security upgrade available

    Conversation powered by Livefyre

    Show Comments Hide Comments
    Latest Galleries from CNET
    Runcible 'wearable' pocket smartwatch (pictures)
    Autodesk helps to make the maker (pictures)
    Lyve keeps your photos organized (pictures)
    Check out these great Android games (pictures)
    Alto's Adventure has excellent graphics (pictures)
    Check out the cheap, 4G LTE Motorola Moto E (pictures)