There are buffer overflows in RealPlayer's header reading code. No exploit has been developed for it, but it appears possible. Real Player has told us there should be a patch out sometime after noon tomorrow (Pacific time).
Read more at www.xatrix.org if you want to be informed.
