TechWeb: Security hole affects RealPlayers
TechWeb News, InternetWeek
(TechWeb) -- A security hole in RealNetworks' media player software could allow attackers to run arbitrary code on a user's computer.
Attackers can run any code they wish on the Windows versions of RealOne Player and RealPlayer, by encouraging users to download a malformed file, according to a security advisory by Next Generation Security Software of Sutton, England, and distributed on the NTBugtraq mailing list.
RealNetworks, whose software is used by millions to play sound and video files, said it had not received reports of "anyone actually being attacked with this exploit." But the company was taking steps to prevent the possibility of attacks.
"We have not yet received reports of anyone actually being attacked with this exploit," the company's Web site said. "However, RealNetworks, has found and fixed the problem."
Installing the patch
RealNetworks recommends users install a patch to fix the software, available from the company's Web site, or check for updates from the Real software.
The Next Generation Security Software advisory can be read on the company's Web site.
© 2002 CMP Media LLC
