Symantec Corporation has issued an alert that rated a threat with its highest possible score after finding attackers exploiting a zero-day vulnerability in RealPlayer that infects Windows machines running Internet Explorer. An ActiveX control installed by RealNetworks Incorporated's RealPlayer program is flawed in such a way that it can be exploited and malicious code downloaded to any PC that wanders to a specially crafted site.
Only systems on which both RealPlayer and IE have been installed are vulnerable. Multiple versions of RealPlayer install the ActiveX control, including the current 10.5 and the beta of Version 11. RealNetworks has not released a fix, but Symantec said it had informed the media player's maker of the bug. Until RealNetworks releases a patch, Symantec said the best advice it can give is to disable the vulnerable ActiveX control but this requires editing the Windows registry.
News source: ComputerWorld
Only systems on which both RealPlayer and IE have been installed are vulnerable. Multiple versions of RealPlayer install the ActiveX control, including the current 10.5 and the beta of Version 11. RealNetworks has not released a fix, but Symantec said it had informed the media player's maker of the bug. Until RealNetworks releases a patch, Symantec said the best advice it can give is to disable the vulnerable ActiveX control but this requires editing the Windows registry.
News source: ComputerWorld
weird
weird
QFT - I didn't think anyone in their right minds would still be using RealPlayer, or any of their products for that matter...
And if there are... shame on you!
weird
QFT - I didn't think anyone in their right minds would still be using RealPlayer, or any of their products for that matter...
And if there are... shame on you!
You forget real player comes pre installed on many pc's you buy from places like pc word or other pre built pc's
For more information about these patches and how the new RealPlayer has been improved, please visit the RealPlayer blog at www.realplayer.com/blog.
Matt Spragins
Real Networks
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.