RealNetworks has issued fixes for four critical vulnerabilities in its RealPlayer program.
The patches cover bugs that affect RealPlayer versions 10 and 11 and RealPlayer Enterprise, a configurable version that is customised for use in corporations.
The vulnerabilities are ranked "highly critical" by tracking firm Secunia. One of the flaws can be exploited to cause a heap-based buffer overflow when processing a malicious Shockwave Flash file (SWF).
The bug is the only of the four that affects RealPlayer for Windows, Mac and Linux platforms.
The other flaws relate to an ActiveX control error, which can cause a heap memory corruption; an unknown local resources error; and an ActiveX error, which can be exploited to launch a stack-based buffer overflow.
RealNetworks, in an advisory, recommends users upgrade their products to the latest version.
See original article on scmagazineus.com
Four fixes shipped for "critical" RealPlayer holes
RealNetworks, maker of RealPlayer, has issued an update to address four serious bugs.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.png&h=140&w=231&c=1&s=0)
Promoted Content
From ambition to impact: The next era of government transformation.
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Protecting the Human Operating System: How Technology Teams Can Perform Under Pressure in an Always-On World
.jpg&h=140&w=231&c=1&s=0)
Partner Content
Who owns your brand’s AI reputation?
.png&w=100&c=1&s=0)
Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
