With attack code circulating, RealPlayer fix coming
630915
InfoWorld - One day after SymantecÂ researchers discovered software that attacked a criticalÂ unpatched vulnerability in RealNetworks' media player, Real says that a fix for the issue is imminent.
226274
RealNetworks Inc. recommends users download updates it released to patch multiple security holes in RealOne Player, RealPlayer and Helix Player.
498738
A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.
498941
(InfoWorld) - Users are being advised to upgrade to newer versions of the RealPlayer and Helix Player multimedia products because of a critical security flaw. The flaw could allow an attacker to gain control over a user's PC using a buffer overflow vulnerability, a memory problem that can allow unauthorized code to run on a machine, according to iDefense Inc. The vulnerability was discovered last October but publicly disclosed Tuesday on iDefense's Web site. Affected versions of the software include the 10.5 "gold" RealPlayer and any 1.x version of Helix Player, according to the French Security Incident Response Team (FrSIRT). FrSIRT categorized the problems as "critical," adding that a denial-of-service attack is also possible. RealPlayer users should receive notification of a "critical update," advising them to upgrade toÂ the beta version of a new release, version 11, said Lewis Webb, a spokesman for RealNetworks. The new version can be downloaded from the RealPlayer Web site, although the site does not mention the security problem. Current versions of Helix Player, an open-source version of RealPlayer, are available on itsÂ developer Web site. For a successful attack, a user would have to be tricked into downloading from a Web site a malicious SMIL (synchronized multimedia integration language) file, a format used in rendering media, iDefense said. Â
689796
Zero Day Patches &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
675996
IT security experts have uncovered a critical vulnerability in the popular Winamp media player, which could be exploited by hackers to compromise a user&#39;s system.
148460
InfoWorld - Apple has released a security fix for its QuickTime media player software, fixing a critical bug that had been worrying security experts for nearly a month.
557160
A software slipup in RealNetworks' music player means that Windows, Mac and Linux computers could be compromised by a movie.
127768
Third-party fix plugs a recently discovered browser flaw that's increasingly being exploited in cyberattacks.
143307
Symantec&#160;is warning users of the RealPlayer media software to be extra careful while surfing the Web.On Wednesday, the company&#39;s Symantec Security Response team uncovered new&#160;attack code that affects the RealPlayer&#160;11 beta and RealPlayer 10.5 software on the Windows platform, according to Ben Greenbaum, a senior manager with the group. By late Wednesday, Symantec had tested the attack and confirmed that it worked on the English version of Windows XP Service Pack 1 running Internet Explorer 6. Tests for the more-recent XP service pack 2 and IE 7 browser were ongoing.For the attack to work, the criminal would have to trick the victim into playing a maliciously encoded Web page. The flaw lies in a browser helper object, software that RealPlayer uses to help users who are experiencing technical difficulties.Once the exploit is run on the victim&#39;s machine, the attacker can download and install whatever software he wants, Greenbaum said.So far, Symantec has just seen the one sample of the attack code, submitted by a customer in the U.S., but Greenbaum expects it to soon become more widespread. Symantec has not yet seen the code posted to public hacker forums, he added.Symantec&#39;s products are now protecting its customers from the attack, but other users can protect themselves by disabling JavaScript and ActiveX in their browsers and by being careful about the sites they visit, Greenbaum said.Greenbaum did not know whether the flaw also exists on Linux and Mac OS versions of RealPlayer, but he said that even if they were vulnerable, the attack code that Symantec has seen would probably need to be rewritten for those platforms.RealPlayer&#39;s maker, RealNetworks, did not immediately respond to requests for comment on this issue.
292176
NBC muckraker outed at DEFCON &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
11119
In what could be the quickest patch ever to be released by Microsoft, the company on Tuesday publicly issued a fix for the highly-publicized Vector Markup Language (VML) vulnerability that surfaced last week and was being actively exploited by numerous attacks.
27813
One day after Symantec Corp. researchers discovered software that attacked a critical unpatched vulnerability in RealNetworks Inc.'s media player, Real says that a fix for the issue is imminent.
383627
A toolkit designed to exploit a recently-disclosed Microsoft JPEG vulnerability has been released onto the net. The toolkit (screen shot from AV firm F-Secure here) makes it trivially easy for maliciously-minded
295779
Blog: Low ransom request and a self-termination date on the code suggest this is a test attack.
408824
Well, if you haven&#39;t patched your PC yet, now is the time. A sample program hit the Internet on Wednesday, showing by example how malicious coders could compromise Windows computers by using a flaw in the
524524
An attack utilizing a vulnerability in an ActiveX control for the popular RealPlayer media program may be spending in a more more dangerous fashion than anyone realized. Exploit code for the vuln has been found embedded in ads served up from a popular advertising site.