Security holes and patches have, unfortunately, become a part of everyday computer life. Now we are faced with two more, and you can’t blame Microsoft this time. RealNetworks has recently announced a hole in their RealPlayer software, and Apple has announced an unrelated, but similar hole in their QuickTime player. These flaws could allow an outside source to execute damaging code on a victim’s computer. Both of these programs are widely used for playing digital media like audio and video.
The flaw in Apple’s QuickTime player affects Windows computers that are running QuickTime Player version 5.x and 6.0, but do not affect Apple computers running QuickTime. Apple has posted a new version, QuickTime 6.1, which is available from the Apple Web site.
The RealNetworks vulnerability affects the following versions: RealOne Player, RealOne Player v2 for Windows, RealPlayer 8 for Windows, RealPlayer 8 for Mac OS 9, RealOne Player for Mac OS X, RealOne Enterprise Desktop Manager and RealOne Enterprise Desktop.
Unfortunately, RealNetworks has not made it so easy to update their player. First you must find out which version of the RealPlayer you have. Do this by clicking on Start-(All) Programs, and finding and opening the RealPlayer software. Then click on Help and choose About Real to get the version number you are using.
If you are using RealOne Player (6.0.10.505) or RealOne Player version 2 (6.0.11.853):
- Go to the Tools menu.
- Select "Check for Update".
- Select the box next to the "Security Update - March 2003" component.
- Click the Install button to download and install the update.
If you are using RealPlayer 8 (version 6.0.9.584):
- Go to the Help menu.
- Select "Check for Update".
- Select the box next to the "Security Update - March 2003" component.
- Click the Install button to download and install the update.
As soon as you finish this, contact RealNetworks and tell them you think it was too difficult to decipher their updates and you would like them to make it easier in the very near future. Like how about just releasing a new version as Apple did? Their Product Feedback form can be found on the RealNetworks Website.
