RealNetworks warns of media player security flaws

RealNetworks Inc.'s media player software contains vulnerabilities that could let an attacker take control of a PC on which the software is used to download multimedia files, the company confirmed this week. There are three vulnerabilities: files could be created that will open a Web site on the user's browser, from where remote Javascript can be operated, files could be created that let the attacker download and use their code on a user's machine, or media files can be created that will create buffer overrun errors. The affected software is: RealOne Player, RealOne Player v2 for Windows only (all languages), RealOne Player 8, RealPlayer 10 Beta (English only) and RealOne Enterprise Desktop or RealPlayer Enterprise (all versions, standalone and as configured by the RealOne Desktop Manager or RealPlayer Enterprise Manager).