RealNetworks joins security patch parade

Buffer overflow errors could allow an attacker to remotely install code

RealNetworks has become the latest company to issue a security alert, revealing at least 10 vulnerabilities in various versions of RealPlayer.

None of the flaws is being actively targeted in the wild, but RealNetworks has urged users to update to the latest version of the player.

Users of RealPlayer 11.0.2 for Mac and Linux or the SP 1.0.2-1.0.5 version for Windows will not need to update their players. But systems running earlier versions of RealPlayer, Helix Player and RealPlayer Enterprise will need to be updated.

Among the 10 vulnerabilities are buffer overflow errors which could be used by an attacker to crash the player and remotely install code on a targeted system. Such remote code vulnerabilities are commonly used to perform malware installations.

The RealPlayer update comes at the end of a busy period for security fixes. Adobe and Apple issued updates for their products recently, while Microsoft yesterday posted a fix for the much talked-about Internet Explorer vulnerability.