RealNetworks, Inc. releases update to address security vulnerabilities.

February 7, 2004

Conductor used our news submit to tell us that the Real Networks software poses some security risks that have been discovered. A variety of the Real products are affected. Fortunately, they are quick to release some fixes .

RealNetworks, Inc. has recently been made aware of security vulnerabilities that could potentially allow an attacker to run arbitrary code on a user"s machine.The specific exploits were:

Exploit 1: To operate remote Javascript from the domain of the URL opened by a SMIL file or other file.

Exploit 2: To fashion RMP files which allow an attacker to download and execute arbitrary code on a user's machine.

Exploit 3: To fashion media files to create 'Buffer Overrun" errors. While we have not received reports of anyone actually being attacked with this exploit, all security vulnerabilities are taken very seriously by RealNetworks. RealNetworks has found and fixed the problem.

Very
serious problems indeed. You can visit this link to update your software and read more about these issues.

Source: RealNetworks