The bug allows malware writers to potentially change heap blocks, which limit the amount of memory that can be stored, to overwrite certain registers, researcher Elazar Broad said today on the website for Neohapsis, a risk and security consultancy. Exploiting the flaw could result in the execution of malicious code.
RealPlayer uses an ActiveX control to play content inside a user's browser. The affected control is rmoc3260.dll version 6.0.10.45, Broad said.
In lieu of a fix, users are encouraged to set the kill bit for the control, he said.
A spokesman for RealPlayer, owned by Real Networks, did not immediately respond to a request for comment.
See original article on scmagazineus.com
Researcher discovers RealPlayer ActiveX bug
A security researcher said Monday he has discovered an unpatched ActiveX vulnerability in RealPlayer, the popular media player, and is working on an exploit.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
iTnews State of Security Breakfast comes to Sydney
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
The AI era demands a new kind of network
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Protecting the Human Operating System: How Technology Teams Can Perform Under Pressure in an Always-On World
SPONSORED RESOURCES
Secure your AI future with generative AI defense
See how F5 protects modern applications against evolving threats
Accelerate AI adoption with a cloud-first strategy
Frontier AI has changed the security landscape. Is your defence ready?
F5 sets the standard for cloud application security
.png&w=120&c=1&s=0){kind=logo}
HPE Networking Day Sydney
iTnews Resilience, Rewired Breakfast
RIMPA Live Convention 2026
What’s Next?
iTnews Benchmark Security Awards 2026
.jpg&h=140&w=231&c=1&s=0)
