main

Security Flaws Found in RealPlayer

malebolgia   on 01 October 2004 - 16:18 · 23 comments & 947 views

Advertisement (Why?)
EEye Digital Security has uncovered new security holes affecting a wide range of RealNetworks' media players, the latest desktop-based bugs set to worry IT managers. The flaws could be exploited via a malicious Web page or a RealMedia file run from a local drive to take over a user's system or delete files, according to RealNetworks.

Researchers have turned up a myriad of serious security flaws in client software over the past few weeks, and such bugs can be difficult to patch because of the sheer number of desktops in use. Recently vulnerabilities have been revealed in WinAmp, WinZip, and Apple Computer's IChat messaging program. A vulnerability in the way Windows software decodes jpeg images has already been exploited by specially crafted pictures.

News source: PCWorld.com


Gamespot interview with Rooster Teeth

GameSpot: Burnie, how much have you had to change your usual MO, given that you are no longer creating video for the heck of it, but for largest game publisher in the world.

Burnie Burns: Well, going from the largest software company in the world, Microsoft, to working with the largest game company in the world is not that big a change. It’s not like we’re having any new challenges or anything like that.

GS: But the games are worlds apart; Halo and The Sims 2.

BB: Yes, the biggest thing, as far as what changes, is that The Sims 2 is a Teen-rated game, whereas Halo is a Mature-rated game. And so to keep in tune with the game itself, we’ve agree to make [the videos] Teen rated. But that fits with the humor anyway. Whenever we write stuff, we like to have it fit in with the audience that already likes the game.

GS: Are you still doing work based on the Halo universe?

BB: I want to make it clear that we’re still doing Red vs Blue. It’s not like we’re stopping. In fact, we’re about to start season three.

GS: What's it been like working on The Sims and with EA?

BB: Everything so far has been great. Everything we’ve done so far has been lots of fun. When we first started talking about [The Sims 2], they had seen Red vs Blue. EA were fans of Red vs Blue. That helped a lot. It wasn’t just like somebody told them that they should get in contact with us. They contacted us because they liked Red vs Blue. They’ve been very, very cool to us.

GS: How are you approaching the creative challenge? And what are your goals with this new project?

BB: Well, with Machinima, you have to work within this limited world. We can’t really go in and make The Sims characters fight with guns or anything like that. That’s something we can do in Halo, but in Halo you can’t put them on a couch or things like that.

When we were writing Red vs Blue over the last year and a half, we’d come up with things that were funny that we wanted to use, some concepts we wanted to make fun of, things that we wanted to parody, but that we just weren’t able to do.

Now, with the strangerhood, we can make fun of sitcoms, make fun of reality shows, poke fun at stuff that we were just not able to in Red vs Blue.

GS: Sounds good.

BB: The project is a really good fit. We actually have a lot of stuff already written out. Hopefully, as we start to work with The Sims 2 engine, we’re going to be able to use that. But the way Machinima works, you never know. The game’s not built to make movies, that’s what the creative process is…we try to milk all that out of [the limited palatte]. Some things you can do and some things you can’t, but that’s part of the fun challenge.

GS: Besides posting the movies that you make using The Sims 2 engine, are you going to be providing any other sorts of content gamers can read or watch?

BB: If there’s any inspiration, it’s going to be inspiration by example I think.

We don’t have a problem talking with people on our forums about how we do things, but we have a commitment to not to do too much stuff that’s outside of the game engine. We try to keep it so that anybody can replicate what we do in the game engine. That’s the really cool part about Machinima.

GS: In general, what do you hear from your fan base?

BB: We get a lot of email from young filmmakers who are wanting to tell a story but who don’t have the money to go out and buy even a video camera. But they may already have a PC game or an Xbox game so they can sit down and create. With The Sims 2, the cool thing is, they’ve already got all this stuff built in. You just hit a button and you can record your gameplay footage. You don’t need any kind of external video capturing equipment…anything like that.

GS: Do you end up answering lots of reader mail that poses "how-to" questions?

BB: We answer questions as they come up but we don’t really put too many tutorials out there because there’s lots of great Machinima sites like machimina.org…they talk about how Machinima works and they offer free tools and things like that.

GS: How many Strangerhood episodes are planned?

BB: Our goal is always to try to treat any series like a TV series, so we try to do 22 episodes in a season. That’s what we’re planning to do here. As far as continuing seasons and things like that, as long as the game company will put up with us then we’ll be happy to do more.

GS: Any fear of losing your core fan base?

BB: We got emails as soon as we put the strangerhood videos up; people were real positive, they were liking it. We thought perhaps the change from a first-person shooter to a more sitcom’y looking cartoon might [alienate] some people, but so far they’ve been real excited about it.

GS: Burnie, that character you call Tovar, he looks a bit like Sims creator Will Wright. Is that intentional?

BB: [laughs] I don’t know, I don’t think so! I might be a little colored by the fact that I know what Tovar’s character is really like. Trust me, if he looks like Will Wright, I don’t think he acts anything like Will Wright. And if he does act like Will Wright, I definitely want to get a job working for Will very, very soon.

GS: Thanks, Burnie.

Post a comment · Send to friend Comments · There are 23 additional comments
#1 XxDesmus_MODxX on 01 Oct 2004 - 16:23
lets us say this together... "Duh"
(1 reply) #2 Rudy on 01 Oct 2004 - 16:26
i thought RealPlayer itself was a security flaw
#2.1 thenay on 01 Oct 2004 - 16:28
lol, ya really
(3 replies) #3 macrosslover on 01 Oct 2004 - 16:27
wait a minute, are these flaws in addition to the ones that Real just patch like yesterday or are they already new ones??

OMG software with holes, who woulda thought
#3.1 thenay on 01 Oct 2004 - 16:29
yup it does indeed affect 10.5's newest build that was updated the other day.. scary thought they already found a new flaw.. so soon
#3.2 sandman45654 on 01 Oct 2004 - 16:36
Darn... I thought Windows was the only software that has security flaws. Thanks for proving this wrong (again) Real

It's only a matter of time before OSS gets its turn in the spotlight
#3.3 Varsity on 01 Oct 2004 - 21:06
It will have to get popular first...
#4 StaticX on 01 Oct 2004 - 16:32
ha... good thing i dont use it
#5 webdenis12 on 01 Oct 2004 - 16:33
there is 50 more to go
#6 ripgut on 01 Oct 2004 - 16:35
(1 reply) #7 SVT on 01 Oct 2004 - 16:47
I though Microsoft patented security flaws?

Last edited by 66785 on 01 Oct 2004 - 17:16
#7.1 ihd on 01 Oct 2004 - 17:01
You lose, that totally wasn't funny.

You know what's funny? This is fu- *BUFFERING*
(2 replies) #8 todd` on 01 Oct 2004 - 18:54
is real alternative affected too?
#8.1 Azmodan on 01 Oct 2004 - 19:16
Looks like its a problem with the realplayer, not the realmedia files. Media Player Classic Real Alternative is safe from this.
#8.2 Hekx on 03 Oct 2004 - 01:22
Goodie.
#9 Cyranthus on 01 Oct 2004 - 19:40
oh gee... what a surprise!
(1 reply) #10 bangbang023 on 01 Oct 2004 - 21:49
Man, you bandwagon whores are pathetic. There hasn't been one intelligent comment to this story yet. All software has flaws. Hell, the article lists a few pieces of software that this group found flaws in this year.
QUOTE
Recently vulnerabilities have been revealed in WinAmp, WinZip, and Apple Computer's IChat messaging program. A vulnerability in the way Windows software decodes jpeg images has already been exploited by specially crafted pictures.

You people see the name Real and, seemingly, transform into some of the worst fanboys.
#10.1 frazell on 01 Oct 2004 - 23:38
What else do you expect? security flaws (or bugs in general) are a fact of life for any software. Seems they were just having some comic relief to that fact of life.
#11 kgraphik on 01 Oct 2004 - 22:06
Hmm. Is it just me or doesn't everything nowadays seem to have a security flaw or two?
#12 Jon on 02 Oct 2004 - 00:37
Deren WHY do you persist in double posting front page news?

http://www.neowin.net/comments.php?id=24507&category=main

Seriously, it doesn't take that much effort does it?
#13 Gary_Player on 02 Oct 2004 - 02:47
realplayer's existance is a flaw
#14 IceDogg on 02 Oct 2004 - 08:31
This was final straw I have removed Real for good. Never could get it to stop auto loading on startup. GOODBYE REAL
#15 PhantasyRPG on 03 Oct 2004 - 20:14
<<removed>>

Last edited by 1798 on 03 Oct 2004 - 20:30

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)