The bug allows malware writers to potentially change heap blocks, which limit the amount of memory that can be stored, to overwrite certain registers, researcher Elazar Broad said today on the website for Neohapsis, a risk and security consultancy. Exploiting the flaw could result in the execution of malicious code.
RealPlayer uses an ActiveX control to play content inside a user's browser. The affected control is rmoc3260.dll version 6.0.10.45, Broad said.
In lieu of a fix, users are encouraged to set the kill bit for the control, he said.
A spokesman for RealPlayer, owned by Real Networks, did not immediately respond to a request for comment.
See original article on scmagazineus.com
Researcher discovers RealPlayer ActiveX bug
By
Dan Kaplan
on
Mar 11, 2008 9:57AM
A security researcher said Monday he has discovered an unpatched ActiveX vulnerability in RealPlayer, the popular media player, and is working on an exploit.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
The Great Resignation has intensified insider security threats
Promoted Content
Security "mindset shift" needed to protect organisations
.png&h=183&w=300&c=1&s=0)
Promoted Content
Accenture and Google Cloud team up to create a loveable, Australian-first, renewable energy product
Promoted Content
Security: Understanding the fundamentals of governance, risk & compliance
Sponsored Whitepapers
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
Beyond FTP: Securing and Managing File Transfers
NextGen Security Operations: A Roadmap for the Future
Video: Watch Juniper talk about its Aston Martin partnership
.jpg&h=146&w=240&c=1&s=0)
