RealPlayer Vulnerability Exploited In The Wild
Exploits for the RealPlayer ‘rmoc3260.dll’ ActiveX Control Memory Corruption Vulnerability are being reported and rated as critical. A complete exploit was published for this vulnerability and it is confirmed in RealPlayer version 11.0.1 (build 6.0.14.794) including rmoc3260.dll version 6.0.10.45. Other versions may also be affected.
Impacted sites have ranged from forums, to webmail, to news agencies. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the affected ActiveX control. Failed exploit attempts will likely crash the application.
Norton Internet Security 2008, Norton AntiVirus 2008, and Norton 360 version 2 customers will see this attack blocked by the existing MSIE RealPlayer rmoc ActiveX BOIPS signature. Some variants of this attack may be blocked as HTTP Internet Explorer Heap Spray Buffer Overflow. Additionally, antivirus signatures are available for Bloodhound.Exploit.182, protecting customers from threats attempting to exploit this vulnerability.
Solution:
Update to version 11.0.2 (build 6.0.14.802) via e.g. “Check for Update” in the “Help->About RealPlayer” menu.
More on CyberInsecure:
Posts
Leave a Reply
Comments with unsolicited links to other resources will be marked as spam. DO NOT leave links in comments. Please leave your real email, it wont be published.