The Register® — Biting the hand that feeds IT

High-priority patch fixes critical vulns in RealPlayer

Available in Windows, Mac and Linux

Free whitepaper – Securing your online data transfer with SSL

RealNetworks has issued an update that patches four security holes in its RealPlayer jukebox program, including a critical flaw that vulnerability tracker Secunia published today.

The company says versions for Windows, Mac, Linux operating systems are all vulnerable to at least one of the flaws and that users should update as soon as possible.

Among the bugs that are fixed is a flaw within the handling of frames in Shockwave Flash (SWF) files that can be triggered by a heap-based buffer overflow. Secunia published this advisory warning of the vulnerability, which carries the common vulnerability and exposure designation CVE-2007-5400.

A second bug, CVE-2007-1309, affects the RealAudioObjects.RealAudio ActiveX control, which doesn't properly manage memory for the Console property, allowing the remote execution of code. Details weren't yet available about the remaining two vulnerabilities, CVE-2008-3064 and CVE-2008-3066.

RealNetworks thanked Dyon Balding, Elazar Broad, CERT/CC, Haifei Li and Peter Vreugdenhil (working with TippingPoint) for bringing the vulnerabilities to its attention.

The advisory is here. ®

Free whitepaper – The starter PKI program

Don’t Miss

GoogleGoogle cloud told to encrypt itself

Updated R in RSA wants s in https

thumbs down teaser 75Buggy 'smart meters' open door to power-grid botnet

Grid-burrowing worm only the beginning

Flag ChinaChinese firm hits back at cyberspy claims

Exclusive Huawei welcomes UK.gov backdoor probe

BlockMaster SafeStickBlockMaster SafeStick hardware-encrypted USB drive

Review Tough enough?