Secunia SmallBusiness
Overview
Advisories
Research
Forums
Create Profile
Our Commitment
All Threads
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: False Positive Real Player Enterprise 6.0.12.1798 flagged as inse...

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
RealNetworks
And, this specific program:
RealPlayer 10.x

This thread has been marked as locked.
jmorlan False Positive Real Player Enterprise 6.0.12.1798 flagged as insecure
Member 26th Nov, 2008 21:42
Ranking: 4
Posts: 12
User Since: 26th Nov, 2008
System Score: N/A
Location: US
Real Player Enterprise 6.0.12.1798 appears to be the most recent release and more secure than the recommended 6.0.12.1675 version. It was released September 2008. See:

http://docs.real.com/docs/enterprise/Release_Notes...

Mark.Cox RE: False Positive Real Player Enterprise 6.0.12.1798 flagged as insecure
Member 26th Aug, 2009 07:30
Score: 0
Posts: 6
User Since: 25th Aug 2009
System Score: N/A
Location: N/A
We have the latest - at 24th August 2009 - version of Real Player Enterprise (6.0.12.1802) and this too is flagged as insecure. So is this a False Positive? Do secunia need a sample of the program?
Was this reply relevant?
+0
-0
Slamgeden RE: False Positive Real Player Enterprise 6.0.12.1798 flagged as insecure
Member 26th Aug, 2009 09:11
Score: 0
Posts: 181
User Since: 17th Jul 2009
System Score: N/A
Location: N/A
on 26th Aug, 2009 07:30, Mark.Cox wrote:
We have the latest - at 24th August 2009 - version of Real Player Enterprise (6.0.12.1802) and this too is flagged as insecure. So is this a False Positive? Do secunia need a sample of the program?


Is it detected as "enterprise", or does it get picked up as normal real-player? You could make a software suggestion, then send them an email and inform them of the problem.

--
Assorted Fnords.
Was this reply relevant?
+0
-0
Mark.Cox RE: False Positive Real Player Enterprise 6.0.12.1798 flagged as insecure
Member 26th Aug, 2009 14:17
Score: 0
Posts: 6
User Since: 25th Aug 2009
System Score: N/A
Location: N/A
Hi

Thanks for the prompt reply. It gets detected as RealPlayer 10.x (not enterprise)

I need to brush up on the escalation route/process for such false- positive detection

Mark
Was this reply relevant?
+0
-0
Mark.Cox RE: False Positive Real Player Enterprise 6.0.12.1798 flagged as insecure
Member 30th Oct, 2009 07:39
Score: 0
Posts: 6
User Since: 25th Aug 2009
System Score: N/A
Location: N/A
I supplied the exe to Secunia and they have updated their rules so that it it get identified correctly as Real Player Enterprise (and currently secure!)

Many thanks to those at secunia and particularly to Izak.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability