Flaws found in RealNetworks media player

Two flaws in RealNetworks' popular media player could let attackers commandeer Windows computers running the software, a security company has warned. The vulnerabilities affect RealPlayer on all versions of Windows, according to two short advisories that eEye Digital Security published Thursday. To exploit the flaws, an attacker would craft a special media file and host it on a Web site or trick a user into opening it, Steve Manzuik, security product manager at eEye, said Friday.

"I don't think there is an immediate risk to users. We have no evidence of others knowing or exploiting the flaw," Manzuik said. Flaws found in RealNetworks media player | CNET News.com

Linked by shanmuga Friday, 2nd December 2005 8:25PM