RealPlayer flaws open PCs up to hijackers

[dArKeR]

RealNetworks says three flaws affecting different versions of its media player could allow attackers to create corrupt music or video files that, when played, take control of a victim's PC.

The flaws, found by U.K.-based Next-Generation Security Software, can affect RealNetworks' RealOne Player, RealOne Player version 2, RealPlayer 8, RealPlayer 10 Beta, and the company's RealOne Enterprise products. To exploit them, an attacker crafts the data in a media file in a certain way. When people play or stream the corrupted file in a vulnerable version of RealPlayer, the attacker's code will run, compromising the PC.

http://theglobeandmail.com/servlet/story/RTGAM.20040206.gtrealfeb6/BNStory/Technology/

[thebaghwan]

1. RealNetworks major sucks!! One of the most anal retentive companies

around. They are a bunch of assholes!! This from a Seattlelite.

[NJCher]

2. OK, that's it

I'm through with them and they are OFF my computer.

I am so sick of the way they reinsinuate themselves into my startup program after I use their player even once. I had it on my computer so I could listen to This American Life but it's not worth it.

Buh bye Real Player.


Cher

[GAspnes]

3. Even "Car Talk" dropped 'em

too much in-line advertising.

So, it's either Windows Media Player, or nothing? Ouch.