Multiple RealPlayer/RealOne Player Supported File Type Buffer Overrun Vulnerabilities

Solution:
The vendor has issued fixed to address these and other vulnerabilities. Users are advised to contact RealNetworks Customer Support to obtain fixes:

http://service.real.com/helix/

Users may also obtain fixed directly through the product interface.

For RealOne Player, RealOne Player v2 and RealPlayer 10 Beta the following actions can be carried out to obtain fixes:

1. In the Tools menu select Check for Update.
2. Select the box next to the "RealPlayer 10" (English) or "RealOne Player" (localized) component.
3. Click the Install button to download and install the update.

For RealPlayer 8 (version 6.0.9.584) the following actions can be carried out to obtain fixes:

1. Go to the Help menu.
2. Select "Check for Update".
3. Select the box next to the "RealPlayer 10" (English) or "RealOne Player" (localized) component.
4. Click the Install button to download and install the update

Real Networks has also released RealPlayer 10 version 6.0.12.690 and RealOne Player 6.0.11.872 that address this issue. Please see the vendor homepage, listed in the reference section, for details on obtaining the updates.



 

Privacy Statement
Copyright 2010, SecurityFocus