Download RealPlayer Security Update – April 2005

RealNetworks Inc. has released a security update for some of their products. RealPlayer is also covered and anyone with a version older than 6.0.12.1069 is susceptible to a serious vulnerability in this program that could allow a malicious person to execute code on your system. The program is a media player aimed to play ram and rm media files, in addition, media formats such as mp3, wav, mpg and avi are also supported. The release notes of this Security Update are as follows:

RealNetworks, Inc. has addressed recently discovered a security vulnerability that offered the potential for an attacker to run arbitrary or malicious code on a customer’s machine. RealNetworks has received no reports of machines compromised as a result of the now-remedied vulnerabilities. RealNetworks takes all security vulnerabilities very seriously.

The specific exploit was:
To fashion a malicious RAM file to cause a buffer overflow which could have allowed an attacker to execute arbitrary code on a customer’s machine.[break]The update is available for the following products:
RealPlayer 10 – 10.5
RealOne Player
RealPlayer 8