RealPlayer uses an ActiveX control to play content inside a user's browser. The affected control is rmoc3260.dll version 6.0.10.45, Broad said.
In lieu of a fix, users are encouraged to set the kill bit for the control, he said.
A spokesman for RealPlayer, owned by Real Networks, did not immediately respond to a request for comment.
See original article on scmagazineus.com