| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / october, 2004 / Updates released for RealPlayer 

Updates released for RealPlayer

Updates released for RealPlayer

RealNetworks has released version 10.5 (6.0.12.1053) of RealPlayer, which corrects several security flaws that allow arbitrary code to be run on affected systems.

These vulnerabilities could allow a remote user to carry out the following actions:

- Generate a specially-crafted RM file that, when opened by the user, allows an attacker to run arbitrary code on the affected computer.
- Create a specially-crafted web page that exploits a flaw in the embedded Player and also allows an attacker to run arbitrary code.
- Generate a web page and an RM file that allow an attacker to delete files from the affected computer.

More information about these vulnerabilities, affected versions and the updates released by RealNetworks at:
http://www.service.real.com/help/faq/security/040928_player/EN/

Windows users can get the corresponding update by accessing the Tools menu and selecting the Check for Update option.

 

Oxygen3 24h-365d, by Panda Software
© Panda Software 2003

 

2004-10-02 18:11

Back