RealPlayer vulns / updates

[AplusWebMaster]

FYI...

RealPlayer v15.0.4.53 released
- https://secunia.com/advisories/49193/
Release Date: 2012-05-16
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2012-1904, CVE-2012-2406, CVE-2012-2411
... vulnerabilities are reported in versions 15.0.3.37 and prior.
Solution: Update to version 15.0.4.53.
Original Advisory:
http://service.real.com/realplayer/s...012_player/en/

- https://real.custhelp.com/app/answer...8878/related/1

- http://www.real.com/realplayer

- http://h-online.com/-1578444
17 May 2012

[AplusWebMaster]

FYI...

Realplayer v15.0.6.14 released
- https://secunia.com/advisories/50566/
Release Date: 2012-09-10
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2012-2407, CVE-2012-2408, CVE-2012-2409, CVE-2012-2410, CVE-2012-3234
... vulnerabilities are reported in versions 15.0.2.72 and prior.
Solution: Update to version 15.0.3.37 or later.
Original Advisory: http://service.real.com/realplayer/s...012_player/en/
Updated September 7, 2012 - current version RealPlayer 15.0.6.14

Mac RealPlayer v12.0.1.1750 released
- https://secunia.com/advisories/50580/
Release Date: 2012-09-10
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2012-2407, CVE-2012-2408, CVE-2012-2409, CVE-2012-2410, CVE-2012-3234
... vulnerabilities are reported in versions 12.0.0.1701 and prior.
Solution: Update to version 12.0.1.1750.
Original Advisory: http://service.real.com/realplayer/s...012_player/en/
Updated September 7, 2012 - current version Mac RealPlayer 12.0.1.1750

[AplusWebMaster]

FYI...

RealPlayer v16.0.0.282 released
- https://secunia.com/advisories/51589/
Release Date: 2012-12-17
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2012-5690, CVE-2012-5691
... vulnerabilities are reported in version 15.0.6.14 and prior.
Solution: Upgrade to version 16.0.0.282.
Original Advisory: http://service.real.com/realplayer/s...012_player/en/

- http://www.securitytracker.com/id/1027893
CVE Reference: CVE-2012-5690, CVE-2012-5691
Dec 17 2012
Impact: Execution of arbitrary code via network, User access via network
Version(s): 14.0.0 – 15.0.6.14
Impact: A remote user can create a file that, when loaded by the target user, will execute arbitrary code on the target user's system.
Solution: The vendor has issued a fix (16.0.0.282).

[AplusWebMaster]

FYI...

RealPlayer v16.0.1.18 released
- https://secunia.com/advisories/52692/
Release Date: 2013-03-18
Criticality level: Highly critical
Impact: System access
Where: From remote ...
CVE Reference: CVE-2013-1750
... vulnerability is reported in versions prior to 16.0.1.18.
Solution: Update to version 16.0.1.18.
Original Advisory: http://service.real.com/realplayer/s...013_player/en/

[AplusWebMaster]

FYI...

RealPlayer v16.0.3.51 released
- https://secunia.com/advisories/54621/
Release Date: 2013-08-26
Criticality: Highly Critical
Where: From remote
Impact: System access
CVE Reference(s): CVE-2013-4973, CVE-2013-4974
...vulnerabilities are reported in versions 16.0.2.32 and prior.
Solution: Update to version 16.0.3.51.
Original Advisory: http://service.real.com/realplayer/s...013_player/en/

[AplusWebMaster]

FYI...

RealPlayer 17.0.4.61 released
- https://secunia.com/advisories/56219/
Release Date: 2013-12-23
Criticality: Highly Critical
Where: From remote
Impact: System access
CVE Reference: CVE-2013-6877
... vulnerability is reported in versions 17.0.2.206 and prior.
Solution: Update to version 17.0.4.61.
Original Advisory: RealPlayer:
- http://service.real.com/realplayer/s...013_player/en/

[AplusWebMaster]

FYI...

RealPlayer 17.0.10.8 released
- http://service.real.com/realplayer/s...014_player/en/
June 27, 2014 - "... product upgrades that contain security bug fixes... summary of which previous and current versions of the RealPlayer software are susceptible to these vulnerabilities... Affected software: Windows RealPlayer 17.0.8.22 and prior..."

- http://www.securitytracker.com/id/1030524
CVE Reference: https://web.nvd.nist.gov/view/vuln/d...=CVE-2014-3113 - 9.3 (HIGH)
Jul 4 2014
Impact: Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): 17.0.8.22 and prior...
Solution: The vendor has issued a fix (17.0.10.8)...