RealPlayer security upgrade available
Security vendor Secunia on Tuesday reported a partial fix for a critical vulnerability it first reported last week affecting the RealPlayer software used to play media within Internet browsers on Windows, Mac, and Linux systems.
Secunia disclosed a critical vulnerability within the rmoc3260 ActiveX control in RealPlayer 11 (11.0.0 - 11.0.2 builds 6.0.14.738 - 6.0.14.802), 10.5 (6.0.12.1040-6.0.12.1663, 6.0.12.1698, 6.0.12.1741), and RealPlayer 10 on Windows;RealPlayer 10.1 (10.0.0.396 - 10.0.0.503) and 10 (10.0.0.305 - 352) on Mac; and RealPlayer 10 on Linux.
Specially crafted Shockwave files could lead to a buffer overflow, which could cause memory corruption under certain circumstances and allow a remote attacker to expose sensitive information on a compromised machine.
In response, Real has made upgrades available for its Windows, Mac and Linux products.
As CNET's resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security. Listen to his podcast at securitybites.cnet.com or e-mail Robert with your questions and comments.
