Vulnerability in RealNetworks Media Players

RealNetworks RealPlayer and Helix Player should be upgraded immediately as publicly available exploit code for a buffer overflow vulnerability that exists in them is being used to compromise computers.

The vulnerability requires that the user open a media file or stream that that has been crafted by an attacker. It could execute arbitrary code or cause a denial-of-service condition on a vulnerable system.

Windows users should follow these steps.

Mac OS X users should open RealPlayer and choose Check for Update in the menu. Then check the box for the “RealPlayer 10 Latest Release” and install and download the update.

[Vulnerability Note VU#770904]