Secunia SmallBusiness
Overview
Advisories
Research
Forums
Create Profile
Our Commitment
All Threads
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: RealPlayer "Install Solution" doesn't point to secure installer

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
RealNetworks
And, this specific program:
RealPlayer 1.x

This thread has been marked as locked.
grumblingtummy RealPlayer "Install Solution" doesn't point to secure installer
Member 13th Dec, 2010 10:11
Ranking: 2
Posts: 10
User Since: 16th Nov, 2010
System Score: 99%
Location: UK
There is a new version of RealPlayer reported by Secunia and on various security newsletters. However the "Install Solution" link in Secunia downloads the insecure version. Has RealPlayer withdrawn the new version or are they still in the process of updating the installers on their website?


--
Regards

John

grumblingtummy RE: RealPlayer "Install Solution" doesn't point to secure installer
Member 13th Dec, 2010 13:33
Score: 2
Posts: 10
User Since: 16th Nov 2010
System Score: 99%
Location: UK
Last edited on 13th Dec, 2010 13:58
It looks like Secuna is detecting the version number incorrectly! Secuna is reporting v14.0.1.609 as v12.0.1.609 which is causing the vulernability reporting of the installed RealPlayer.

OS: Windows 7 Ultimate x64

Further Update:
The realplayer.exe file has a file version of 12.0.1.609. Looks like this could be an issue with Real building their release with the wrong version number.

--
Regards

John
Was this reply relevant?
+0
-0
This user no longer exists RE: RealPlayer "Install Solution" doesn't point to secure installer
Member 13th Dec, 2010 14:22
Hi,

Thank you both for reporting this issue so quickly!

We have been able to fix the problem, and if you run a full rescan, your RealPlayer installation should be properly detected.

The problem was caused by RealPlayer failing to actually change any of the version numbers from version 12.x to 14.x, so it required a little creative tampering to solve.

Is anyone stil experincing issues with this application?
Was this reply relevant?
+0
-0
grumblingtummy RE: RealPlayer "Install Solution" doesn't point to secure installer
Member 13th Dec, 2010 14:32
Score: 2
Posts: 10
User Since: 16th Nov 2010
System Score: 99%
Location: UK
Last edited on 13th Dec, 2010 14:39
I can confirm Secunia is now detecting the most recent version of RealPlayer. Thank you Secunia.

This issue should be reported to Real for them to fix in their next release.


--
Regards

John
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability