Media Players Hit by Security Glitch
April 04, 2003
Reston, VA - RealNetworks and Apple Computer are advising users of their media players to update the software as a result of security problems described by both companies.
RealNetworks warned in an advisory that a security flaw affecting RealOne Player and RealPlayer 8 can result in corruption when creating a specifically-corrupted PNG (Portable Network Graphics) file. It is possible to execute arbitrary code on a user's machine, the company reported.
The company says it is not aware of an actual breach of the software through the flaw.
Meanwhile a risk with Apple QuickTime was also publicized, one that could allow destructive code to be loaded into vulnerable systems.
The vulnerability is Windows specific (Mac users are immune) and affects QuickTime Player versions 5.x and 6.0 on Windows. Users are encouraged to upgrade to QuickTime 6.1 for Windows, which addresses the vulnerability.
RealNetwork's security page can be found
here.
Apple's security page can be found here.
For more information, visit
www.idefence.com/current
# # #
For a listing of all the WEVA News Stories...
Click Here |