RealPlayer, Helix Player vulnerable to attack
498941
(InfoWorld) - Users are being advised to upgrade to newer versions of the RealPlayer and Helix Player multimedia products because of a critical security flaw. The flaw could allow an attacker to gain control over a user's PC using a buffer overflow vulnerability, a memory problem that can allow unauthorized code to run on a machine, according to iDefense Inc. The vulnerability was discovered last October but publicly disclosed Tuesday on iDefense's Web site. Affected versions of the software include the 10.5 "gold" RealPlayer and any 1.x version of Helix Player, according to the French Security Incident Response Team (FrSIRT). FrSIRT categorized the problems as "critical," adding that a denial-of-service attack is also possible. RealPlayer users should receive notification of a "critical update," advising them to upgrade toÂ the beta version of a new release, version 11, said Lewis Webb, a spokesman for RealNetworks. The new version can be downloaded from the RealPlayer Web site, although the site does not mention the security problem. Current versions of Helix Player, an open-source version of RealPlayer, are available on itsÂ developer Web site. For a successful attack, a user would have to be tricked into downloading from a Web site a malicious SMIL (synchronized multimedia integration language) file, a format used in rendering media, iDefense said. Â
172049
Blog: Suspicious of the guy who is just blowing everybody away in Quake 3? Your future PC might be able to tell who is cheating.
266550
MySpace, AGs in deal over sex-offender data &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
676591
Ziff Davis - Holes in KOffice and RealPlayer allow attackers to take over a user's system.
599698
A London security analyst working with the open source group GNUCitizen has discovered a potentially serious exploit that could affect users of the Firefox browser and Apple's QuickTime movie and music player - especially iTunes customers - on Windows XP-based machines. BetaNews tested and verified the severity of the exploit.
687926
Retro attack gets new life, worries browser makers &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
222395
As reported here on Secunia (as discovered by shinnai), there's a code execution vulnerability in PHP's glob function:    The vulnerability is caused due to an error in the handling of an uninitialized structure inside the "glob()" function. This can be exploited to execute arbitrary code, which may lead to security restrictions (e.g. the "disable_functions" directive) being bypassed.   The vulnerability is confirmed in the 5.2.3 win32 installer. Other versions may also be affected.    The issue is marked as "less critical" and can be avoided easily by only allowing trusted users the correct permissions to execute PHP code on the server.
98682
One day after Symantec&#160;researchers discovered software that attacked a critical&#160;unpatched vulnerability in RealNetworks&#39; media player, Real says that a fix for the issue is imminent.&quot;Real has created a patch for RealPlayer 10.5 and RealPlayer 11 that addresses the vulnerability identified by Symantec,&quot; wrote RealNetworks General Manager of Product Development Russ Ryan, in a Friday blog posting. &quot;Real will make this patch available to users via this blog and our security update page later today.&quot;Users of RealOne Player, RealOne Player v2, and RealPlayer 10 should upgrade to the 10.5 version of the product or the RealPlayer 11 beta code and should install the patch, Ryan said.The attack exploits a flaw in an ActiveX browser helper object, software that RealPlayer employs to help users who are experiencing technical difficulties, so the PC must be using the Internet Explorer browser to be affected by this particular attack, Symantec said.The attack only works on Windows systems, RealNetworks said. Linux, Mac and RealPlayer 8 users are not affected.Attackers were using a complicated network of advertising Web sites to launch the attack from a Web site that has been spotted hosting malicious code several times over the past two years, Symantec said.&quot;The exploit itself is embedded in advertisements that were being served by 247realmedia.com,&quot; Symantec said in a note on its DeepSight threat management system. &quot;The redirection to the exploit page... was accomplished through an iFrame embedded in each advertisement.&quot;Iframe is an HTML command that allows developers to insert a second Web page into the page being viewed. It is often used by malware creators because these iFrame pages can be as small as 1 pixel, making them invisible to the naked eye.Users who do not have the patch can turn off ActiveScripting within IE as a workaround to the problem. Very technical users can also set kill bit on the Class identifier (CLSID) FDC7A535-4070-4B92-A0EA-D9994BCC0DC5 to disable the ActiveX control, Symantec said.&#160;
135214
Vulnerability could allow an attacker to gain complete control of a system.
647039
p2pnet.net News:- Winamp has an extremely critical security hole that could be exploited by hackers to compromise a user&#39;s system.
728050
According to this security release from Secunia, there's a cross-site scripting vulnerability with the Travelsized CMS package (PHP-based) in the main index file.   David Vieira-Kurz has discovered some vulnerabilities in Travelsized CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.   The problem comes from the input parameters "page" and "langauge" not being verified and sanitized. Users are encouraged to go in and manually edit the source to correct the problem as there is no patch currently posted as of yet. You can get complete information about this issue from the full Secunia report.
699435
A researcher has posted proof-of-concept code for a zero-day flaw within Mac OS X dealing with its handling of disk image (.dmg) files. The issue causes a memory corruption vulnerability that could allow attackers to execute arbitrary code.
654913
The popular skinning feature in Nullsoft&#39;s WinAmp media player has left the door wide open for malicious attackers to hijack PCs.
266160
Flaws in media players could automatically download malicious code, let hackers in.
421832
SEATTLE, June 26  /PRNewswire-FirstCall/ -- Digital entertainment services company RealNetworks(R) , announced that the much anticipated new RealPlayer(R) is now available for consumers to download for free at http://www.realplayer.com/.
104107
Embedded Problems &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
73714
Stopbadware.org, which offers analysis of websites and software, says users should steer clear of RealPlayer 10.5 and 11, but Real disputes their analysis.