ActiveX strikes again- RealPlayer security flaw

The endless parade of security problems with ActiveX add-ons for Internet Explorer (IE) marches on. This time, it’s the RealPlayer plug-in, according to a report at eWeek:

The widely deployed RealPlayer software is vulnerable to a heap corruption vulnerability that could put Windows users at risk of code execution attacks, according to a warning from a security researcher.

Elazar Broad, a hacker who has led an all-out assault on buggy ActiveX controls in popular software products, has issued an alert for the latest RealPlayer hiccup, warning that RealPlayer users running Internet Explorer are sitting ducks for drive-by malware downloads.

Share this post:
  • Digg
  • del.icio.us
  • Facebook
  • StumbleUpon
  • Reddit

Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically to your feed reader.

Comments

No comments yet.

Sorry, the comment form is closed at this time.