RealPlayer haunted by 'critical' security holes

If you have Real Player (AOL often installs it), you need to patch it.  The ZDNet article below has the best explanation I have seen.

US-CERT Current Activity: RealNetworks Releases Update to Address Vulnerabilities in RealPlayer

added August 31, 2010 at 08:23 am
RealNetworks, Inc. has released an update for RealPlayer to address multiple vulnerabilities. These vulnerabilities may allow a remote, unauthenticated attacker to execute arbitrary code or obtain sensitive information. US-CERT encourages users and administrators to review the RealNetworks, Inc. security advisory for these vulnerabilities and apply any necessary updates to help mitigate the risks.

RealPlayer haunted by 'critical' security holes | ZDNet

By Ryan Naraine | September 1, 2010, 11:47am PDT

If you still have the RealPlayer software on your machine, now might be a good time to uninstall it. If you really need to keep it (why?), it’s definitely time to apply the latest update to avoid malicious hacker attacks.

RealNetworks has shipped a critical update to address multiple vulnerabilities, some serious enough to allow a remote, unauthenticated attacker to execute arbitrary code or obtain sensitive information.