Cyber Risks · Krebs on Security

Patch it or Scratch it: Real Player

Summary: RealNetworks shipped a critical update for RealPlayer on all supported operating systems, fixing at least 11 serious flaws that could let an attacker seize control of a system by getting a user to view a poisoned .rm file. Krebs advises that if you no longer use the program, uninstalling it makes more sense than patching it, and notes VLC player can play most RealPlayer content.

Bottom line: Eleven flaws that hand an attacker control of the machine through a single viewed .rm file sit on software many users cannot remember opening in years - the exposure persists whether or not anyone still uses the program.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related