Real Player 10 security patch

[Doctor Q]

RealNetworks has issued a June Security Update for Real Player 10:

RealNetworks, Inc. has addressed recently discovered security vulnerabilities that offered the potential for an attacker to run arbitrary or malicious code on a customer's machine. RealNetworks has received no reports of machines compromised as a result of the now-remedied vulnerabilities. RealNetworks takes all security vulnerabilities very seriously.

The specific exploit affecting Macs: A malicious RealMedia file can use RealText to cause a heap overflow to allow an attacker to execute arbitrary code on a customer's machine.

To install the update:

1. Go the RealPlayer menu.

2. Choose Check for Update.

3. Select the box next to the "Security Update - June 2005" component.

4. Click Install to download and install the update.​

Previous security updates were issued in March and April.

 

[croshtique]

Hm, tried installing this update three times now; twice it's hung and once it's quit on me.

 

[Applespider]

Worked for me. But I only installed Realplayer again over the weekend and I can't believe they hadn't bundled the April update in there yet.

 

[Doctor Q]

The update failed for me too. It just hung until I killed it. But I found that updating to the "gold" version first, and then applying the security updates, worked.

 

[stridey]

Worked fine for me.