Help Center Home
 
 Email article
 
 
 Print article
 
 Open in new window
Security Alert: Update your media player software
Summary:  A number of serious security vulnerabilities have been discovered in various media players. Many of these vulnerabilities allow a malicious Web page or media file to completely compromise your computer. Learn how to update your media player software to protect your computer.

On this page:

What is a media player & which ones are vulnerable?

A media player is software that you use on your computer to listen to music, view pictures, or view video. iTunes, QuickTime, RealPlayer, WinAmp, Windows Media Player, and Macromedia Flash Player are the media players that have security vulnerabilities.

How do I know if I have these media players?

These media players are probably installed on 98% of the computers on campus. If you browse the Web, it is very probable that you have at least one of these media players on your computer. Note: These media players are pre-installed on all BC-imaged computers, either bought through the BC laptop program or distributed by ITS (Information Technology Services).

To see if you have Macromedia Flash Player on your Windows or Macintosh computer:

  1. Go to New Window www.macromedia.com/shockwave/welcome.
  2. If you see the animation playing below the Macromedia Flash Player heading, then you have Macromedia Flash Player installed on your computer.

Windows

To see if you have iTunes, QuickTime, RealPlayer, WinAmp, and Windows Media Player on your Windows computer:

  1. Click the Start button, point to Programs or All Programs.
  2. If the media player is listed with your programs, it is installed on your Windows computer.

Macintosh

To see if you have iTunes, QuickTime, RealPlayer, and Windows Media Player on your Macintosh computer:

  1. On your desktop, double-click the Macintosh HD (Hard Disk) icon.
  2. Double-click the Applications folder.
  3. If the media player is listed with your applications, it is installed on your Macintosh computer.

How do I update my media player software?

If you use any of the media players listed below, and you are not using the most recent version with all applicable patches, you are vulnerable to attacks.

Follow the instructions below to update the media player software on your computer:

iTunes

To update iTunes on your Windows computer:

  1. Log in to your computer using an account with Administrator privileges.
  2. Make sure you are connected to the Internet.
  3. Open iTunes: Click the Start button, point to Programs or All Programs, then click iTunes.
  4. From the Help menu, click Check For iTunes Updates.

To update iTunes on your Macintosh computer:

  1. Log in to your computer using an account with Administrator privileges.
  2. Make sure you are connected to the Internet.
  3. From the Apple menu, select Software Update.
  4. If iTunes is listed on the Software Update window, click the checkbox next to it and then click Install.

Macromedia Flash Player

To update Macromedia Flash Player:

  1. Log in to your computer using an account with Administrator privileges.
  2. Go to New Window www.macromedia.com/shockwave/welcome
  3. An update will be prompted if you need an update to your Flash Player.

QuickTime

Note: Tuesday, January 17, 9:30 pm The QuickTime server is currently experiencing problems. Your computer may not be able to establish a connection. Please try this update again later.

To update QuickTime on your Windows computer:

  1. Log in to your computer using an account with Administrator privileges.
  2. Make sure you are connected to the Internet.
  3. Open QuickTime: Click the Start button, point to Programs or All Programs, point to QuickTime, then click QuickTime Player.
  4. From the Help menu, click Update Existing Software.

To update QuickTime on your Macintosh computer:

  1. If you use FinalCut Pro, refer to the FinalCut documentation prior to installing any QuickTime updates.
  2. Log in to your computer using an account with Administrator privileges.
  3. Make sure you are connected to the Internet.
  4. From the Apple menu, select Software Update.
  5. If QuickTime is listed on the Software Update window, click the checkbox next to it and then click Install.

RealPlayer

To update RealPlayer on your Windows computer:

  1. Log in to your computer using an account with Administrator privileges.
  2. Make sure you are connected to the Internet.
  3. Open RealPlayer: Click the Start button, point to Programs or All Programs, point to Real, point to RealPlayer, then click RealPlayer.
  4. From the Tools menu, click Check For Update.
  5. Click the checkbox next to any Security Updates listed and click Install.

To update RealPlayer on your Macintosh computer:

  1. Log in to your computer using an account with Administrator privileges.
  2. Make sure you are connected to the Internet.
  3. Open RealPlayer: On your desktop, double-click the Macintosh HD (Hard Disk) icon. Double-click the Applications folder. Double-click the RealPlayer icon.
  4. From the RealPlayer menu, click Check for Update.

WinAmp (Windows only)

To update WinAmp:

  1. Log in to your computer using an account with Administrator privileges.
  2. Go to New Window http://www.winamp.com/player.free.php
  3. Choose to download the free Lite version.

Windows Media Player

To update Windows Media Player on your Windows computer:

  1. Log in to your computer using an account with Administrator privileges.
  2. Make sure you are connected to the Internet.
  3. Open Windows Media Player: Click the Start button, point to Programs or All Programs, point to Accessories, point to Entertainment, then click Windows Media Player.
  4. From the Help menu, click Check for Player Updates.

To update Windows Media Player on your Macintosh computer:

  1. Log in to your computer using an account with Administrator privileges.
  2. Make sure you are connected to the Internet.
  3. Open Windows Media Player: On your desktop, double-click the Macintosh HD (Hard Disk) icon. Double-click the Applications folder. Double-click the Windows Media Player folder. Double-click the Windows Media Player icon.
  4. From Help menu, click Check for Player Upgrade.
    Internet Explorer opens this page: New Window www.microsoft.com/windows/windowsmedia/download
  5. If you do not have the most recent version of Windows Media Player, download & install it from this page.

How can I learn more about these security vulnerabilities?

To learn about the technical details of these security vulnerabilities from SANS, go to: New Window www.sans.org/top20/#c7

Need more help?

Web site feedback

Was this article helpful?

Very
Somewhat
Not at all

Please enter your comments about this article so that we can improve it (optional):

Remember: This form is intended for Web site feedback only.
If you need more help, please contact the resources listed above.