RealPlayer/RealOne Player RMP Skin File Handler Directory Traversal Vulnerability
The vendor has issued fixed to address this and other vulnerabilities. Users are advised to contact RealNetworks Customer Support to obtain fixes:
Users may also obtain fixed directly through the product interface. For RealOne Player v2 the following actions can be carried out to obtain fixes:
1. In the Tools menu select Check for Update.
2. Select the box next to the "RealPlayer 10" (English) or "RealOne Player" (localized) component.
3. Click the Install button to download and install the update.
Real Networks has also released RealPlayer 10 version 184.108.40.2060 and RealOne Player 220.127.116.112 that address this issue. Please see the vendor homepage, listed in the reference section, for details on obtaining the updates.