Real Player 10 security patch

Doctor Q

Administrator
Original poster
Staff member
Sep 19, 2002
36,169
3,353
Los Angeles
RealNetworks has issued a June Security Update for Real Player 10:
RealNetworks, Inc. has addressed recently discovered security vulnerabilities that offered the potential for an attacker to run arbitrary or malicious code on a customer's machine. RealNetworks has received no reports of machines compromised as a result of the now-remedied vulnerabilities. RealNetworks takes all security vulnerabilities very seriously.

The specific exploit affecting Macs: A malicious RealMedia file can use RealText to cause a heap overflow to allow an attacker to execute arbitrary code on a customer's machine.
To install the update:
1. Go the RealPlayer menu.

2. Choose Check for Update.

3. Select the box next to the "Security Update - June 2005" component.

4. Click Install to download and install the update.​
Previous security updates were issued in March and April.
 

Doctor Q

Administrator
Original poster
Staff member
Sep 19, 2002
36,169
3,353
Los Angeles
The update failed for me too. It just hung until I killed it. But I found that updating to the "gold" version first, and then applying the security updates, worked.