Real Player under Attack - The Community's Center for Security

Real Player under Attack

Source: MonstersandCritics.com - Posted by Benjamin D. Thomas

For Linux the RealPlayer 10 and the Helix Player are affected. No fixed versions are available for this. The Player for Symbian and PalmOS are not concerned by the weak spots.RealNetworks classifies the security gaps as critical and recommends all users to install the available updates. Under Windows and Mac OS the update function of the Player can be used.

The latest version of the Real Player from RealNetworks contains two serious security holes. Prepared .WAV or .SMIL files can cause a buffer overflow which enables an aggressor to upload code on the user's desktop, which is executed when the user opens the files. Files which have been prepared like this can be transferred via email or download.

Read this full article at MonstersandCritics.com

Only registered users can write comments.
Please login or register.