Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Red Hat: RHSA-2008:0812-01 Critical: RealPlayer Remote Code Execution

red hat
Calendar Grey July 31, 2008
Dist Redhat Esm H88
RealPlayer version 10.0.9 is affected by a severe vulnerability that necessitates immediate attention. Refer to the advisory for guidance on remediation steps.
RealPlayer 10.0.9 is vulnerable to a critical security flaw and should no longer be used

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

Summary

RealPlayer is a media player that provides media playback locally and via streaming.
RealPlayer 10.0.9 is vulnerable to a critical security flaw and should no longer be used. A remote attacker could leverage this flaw to execute arbitrary code as the user running RealPlayer. (CVE-2007-5400)
This issue is addressed in RealPlayer 11. Red Hat is unable to ship RealPlayer 11 due to additional proprietary codecs included in that version. Therefore, users who wish to continue to use RealPlayer should get an update directly from www.real.com.
RealPlayer 10.0.9 packages will remain available via Red Hat Network for those who choose to use them, despite their known security vulnerabilities.

Topics%20covered

Topics Covered

security advisory Red Hat remote code execution RealPlayer critical flaw

References

https://access.redhat.com/security/updates/classification#critical

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2008:0812-01
Product: Red Hat Enterprise Linux Extras
Advisory URL: https://access.redhat.com/errata/RHSA-2008:0812.html
Issue date: 2008-07-31

Topic

RealPlayer 10.0.9 as shipped in Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary, contains a security flaw and should not be used.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Topics%20covered

Topics Covered

security advisory Red Hat remote code execution RealPlayer critical flaw

Relevant Releases Architectures

Bugs Fixed

456855 - CVE-2007-5400 RealPlayer: SWF Frame Handling Buffer Overflow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here