Secunia

Multiple vulnerabilities have been discovered in RealOne Player and RealPlayer, where the most serious potentially can be exploited by malicious people to compromise a vulnerable system.

Boundary errors when parsing ".RP", ".RT", ".RAM", ".RPM", and ".SMIL" files can be exploited to cause buffer overflows via specially crafted files (e.g. hosted on a malicious web site). Successful exploitation allows execution of arbitrary code on a user's system.

An input validation error in the installation of skin files via ".RMP" (RealJukebox Metadata Packages) files can be exploited to download and execute arbitrary files on a user's system via a classic directory traversal attack ("..\").

An input validation error in the handling of ".SMIL" and other files can be exploited to conduct cross-site scripting attacks.

The following products are affected:
* RealPlayer 8
* RealPlayer 10 Beta
* RealOne Player
* RealOne Player v2
* RealOne Enterprise Desktop / RealPlayer Enterprise (all language versions, all platforms)

Solution
The vendor has issued patches, which can be applied via the "Check for Update" feature.

Provided and/or discovered by
Mark Litchfield, NGSSoftware.
Jouko Pynnönen

Changelog
Further details available in Customer Area

Original Advisory
RealNetworks:
http://www.service.real.com/help/faq/security/040123_player/

NGSSoftware:
http://www.ngssoftware.com/advisories/realone.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area