Alert GCSA-10124 - Vulnerabilita' multiple in RealPlayer

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

        Alert ID : GCSA-10124
            Data : 27 agosto 2010
          Titolo : Vulnerabilita' multiple in RealPlayer

******************************************************************


:: Descrizione del problema

Sono state riscontrate vulnerabilita' multiple in RealPlayer,
delle quali una ha un impatto sconosciuto mentre le altre potrebbero
essere sfruttate per accedere a file o per compromettere un sistema utente.

Per una descrizione completa delle vulnerabilita' fare riferimento alla 
segnalazione ufficiale.


:: Piattaforme e Software interessati

RealPlayer 11.x


:: Impatto

Accesso al sistema
Compromissione del sistema


:: Soluzione

Aggiornare a RealPlayer SP versione 1.1.5.


:: Riferimenti

RealNetworks:
http://service.real.com/realplayer/security/08262010_player/en/

Secunia:
http://secunia.com/advisories/41154/

Mitre CVE:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0116
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0117
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0120
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2996
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3000
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3001
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3002

-----BEGIN PGP SIGNATURE-----

iQCVAwUBTHeLiPOB+SpikaiRAQIn2wP9EvsI+W7SPO19OgjgKpSVPrGu7y3fSgUO
mhaEET/xQ03juT9jX5z4d5FO2kQheZIDT+yY5XhFJkS2VMSdOxP6wxW4WSvB9uqT
fDjJKF6ElpY1ZB2+UVktnLs/4IvoYME09YvIhnEfaFlQFPvgb2zncOlcooPryCrm
UGyXz20wZfg=
=8AfY
-----END PGP SIGNATURE-----