Ten vulnerabilities found in RealPlayer

RealNetworks has become the latest company to issue a security alert to users.

The company revealed that at least 10 vulnerabilities were present in various versions of RealPlayer. While none of the flaws have found to be actively targeted in the wild, the company is urging users to update to the latest version of the player.

Users who are currently using the 11.0.2 RealPlayer versions for Mac and Linux or the SP 1.0.2-1.0.5 version for Windows will not need to update their players. Systems running earlier versions of RealPlayer, Helix Player and RealPlayer Enterprise will need to be updated, however.

Among the ten vulnerabilties patched in the update are buffer overflow errors which can be used by an attacker to crash the player and remotely install code on a targeted system. Such remote code vulnerabilities are commonly used to perform malware installations.

The RealPlayer update comes at the end of what has been a busy period for security fixes. Adobe and Apple both issued updates for their products recently, while Microsoft last week posted a fix for the much talked-about Internet Explorer vulnerability.