Realplayer Vulnerability, (Fri, Jan 4th)

[Steve]

Good morning everyone,



Earlier this week, Evgeny Legerov reported a vulnerability involving Real Player which could allow an attacker to execute code on victim computers. At this moment in time, there is no patch or other work around for this vulnerability though I would expect that limiting end-user privileges would limit the potential risk.



Until an update is available, I recommend that you limit viewing multimedia content using Real Player. It would be worthwhile to plan to add this future update into the mix with any operating system updates which are scheduled to be released soon.



For more information on this vulnerability, please see:



http://www.frsirt.com/english/advisories/2008/0016

More...