RealPlayer security upgrade available

Media player vendor rushes out a point upgrade in response to a critical vulnerability disclosure.

Security vendor Secunia on Tuesday reported a partial fix for a critical vulnerability it first reported last week affecting the RealPlayer software used to play media within Internet browsers on Windows, Mac, and Linux systems.

Secunia disclosed a critical vulnerability within the rmoc3260 ActiveX control in RealPlayer 11 (11.0.0 - 11.0.2 builds -, 10.5 (,,, and RealPlayer 10 on Windows;RealPlayer 10.1 ( - and 10 ( - 352) on Mac; and RealPlayer 10 on Linux.

Specially crafted Shockwave files could lead to a buffer overflow, which could cause memory corruption under certain circumstances and allow a remote attacker to expose sensitive information on a compromised machine.

In response, Real has made upgrades available for its Windows, Mac and Linux products.

About the author

    As CNET's former resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security.


    Discuss RealPlayer security upgrade available

    Conversation powered by Livefyre

    Show Comments Hide Comments
    Latest Articles from CNET
    Facebook shares its diversity training course with all