remote code execution in RealPlayer

Two security problems were found in the media player RealPlayer: - CAN-2005-0455: A buffer overflow in the handling of .smil files. - CAN-2005-0611: A buffer overflow in the handling of .wav files. Both buffer overflows can be exploited remotely by providing URLs opened by RealPlayer. More informations can be found on this URL: http://service.real.com/help/faq/security/050224_player/EN/ This updates fixes the problems.

Solution

A workaround for this problem would be to deinstall the RealPlayer package by running this command as root user: rpm -e RealPlayer Please consider doing so if you do not want to view Real content.