Several security holes in RealNetworks' widely used media player software could put PCs at risk of attack, the company has warned.
Four vulnerabilities in RealPlayer have been discovered, the most serious of which could allow an intruder to gain control of a computer, RealNetworks said in a security advisory posted Thursday. Software updates are now available to plug the holes, the company said.
Security experts from the French Security Incident Response Team, or FrSIRT, labeled the problems as "critical"--the highest rating--in an alert issued Thursday.
The problems exist in current and some older releases of RealPlayer, and they affect versions for Windows as well as Mac OS and Linux, RealNetworks said. In addition, one of the newly patched bugs also is found in Rhapsody 3, the software used in RealNetworks' music service.
Three of the four flaws could be exploited using a malicious media file, RealNetworks said. Specially crafted RealMedia and AVI files could allow an attacker to take over a user's computer, while a malicious MP3 file could be used to overwrite local files or execute ActiveX controls, it said.
To take advantage of the fourth flaw, a hacker would need to build a malicious Web site. However, the attack would require the user to be running earlier versions of Internet Explorer with standard settings on the computer, RealNetworks said.
RealNetworks' updates are available in its advisory for all affected products and recommends that people install the newer versions.
Like, every other month they issue patches for ReekPlayer. What is wrong with this company? They've only got one small app to take care of and they can't even manage that. And what is with their hokey player that forces me to login every time I use it to get the full 10 band equalizer, for which I have paid? Can't they just set the registry to record the license and give me the full feature set automatically? This company is so dumb they deserve to go out of business.
I wasn't sure that Real was still around - other than CNET's insistance on using this defective service for videos.
I haven't even seen a .rm file in many months - but there have been multitudes of .mpg, .mov, .avi, etc. files. Sort of made me think that Real had vaporized when no one was looking.
Google creates an animated doodle that features a boy, a girl, Google's search engine, and a jump rope. But might there be darker, more analytical, more troubling interpretations to this tale?
When the sun goes down, that's when the iPad gets busy for folks with news readers. The iPhone? It's more of a daytime habit. If you're building an app for both devices, heed the lesson.
Chamtech's spray-on antenna uses a nano material to provide a low-power boost to antenna range. The wireless-in-a-can product may some day bring an end to unsightly cell towers.
EnerG2 opens a plant to make an engineered carbon that will improve performance of energy storage devices and make storage for start-stop hybrid cars less expensive.
insistance on using this defective service for videos.
I haven't even seen a .rm file in many months - but there have been
multitudes of .mpg, .mov, .avi, etc. files. Sort of made me think
that Real had vaporized when no one was looking.
Too bad. That's what they should do....