Slashdot Mirror

← Back to Stories (view on slashdot.org)

RealPlayer Zero-Day Flaw Under Attack

Posted by Zonk on from the my-kingdom-for-a-patch dept.

openOption writes "ZDNet is reporting that hackers are actively exploiting a zero-day hole in RealNetworks' RealPlayer media player, a software program installed on tens of millions of Windows computers worldwide. The in-the-wild attacks targets a previously unknown and unpatched ActiveX vulnerability in the way RealPlayer interacts with Microsoft's Internet Explorer browser. The flaw is causing drive-by malware downloads when an IE user simply browsers to a maliciously rigged Web page."

18 of 150 comments (clear)

  1. Installed by millions... by Anonymous Coward · · Score: 5, Funny

    Used by no one... until now.

  2. Good thing I don't use Real by Anonymous Coward · · Score: 2, Funny

    Greased up Yoda doll
    Puckered anus
    GO LINUX!

  3. SOFTWARE PROGRAM!!!11111```oneone by Anonymous Coward · · Score: 5, Funny


    a software program

    I like software programs. They run well on my computer PC and look nice on my display monitor. My computer PC works well, all the way from the electric power cable to the Ethernet network card, the hard disk hard drive, and my wireless keyboard keyboard and mouse mouse.

    (What are synonyms for keyboard and mouse?)

  4. Hackers are the least of their troubles... by Ecuador · · Score: 2, Funny

    I don't want to be a troll, but people who install Real Player are asking for trouble.
    Wow, I just had a scary thought I managed to block just in time before passing out: Real Player. On Vista.

    --
    Violence is the last refuge of the incompetent. Polar Scope Align for iOS
    1. Re:Hackers are the least of their troubles... by Dishevel · · Score: 4, Funny

      I love Real Player. Its icon is pretty and when I click on some things on the internet it works sometimes for me. If it dose not work I just figure that the people putting that bad stuff on the internet must not know what a wonderful company Microsoft is for people like me. Now if you will excuse me I need to click on something real fast so AOL doe not disconnect me again. All I need is MS programs that I can use while online with AOL with my wonderful CABLE COMPANY connection to the internet.

      --
      Why is it so hard to only have politicians for a few years, then have them go away?
  5. Experts Quickly Noted However.... by rel4x · · Score: 5, Funny

    ...that the viruses using this attack were still easier to uninstall than RealPlayer itself.

    --

    Before you mod me funny, think, perhaps I was insightfully funny?
    1. Re:Experts Quickly Noted However.... by Fx.Dr · · Score: 5, Funny

      Upon attempting to exploit the flaw, the virus was promptly greeted with ...BUFFERING... ...BUFFERING...

  6. Video press release by operagost · · Score: 4, Funny

    Real has posted a video press release on this. I would like to tell you more, but it's still buffering. Maybe they should use Media Player for their press releases.

    --

    Gamingmuseum.com: Give your 3D accelerator a rest.
  7. I wouldn't worry... by Deacon_Yermouf · · Score: 2, Funny

    It's going to take a while for the virus to stop buffering....

  8. Get with it by Skiron · · Score: 2, Funny

    New marketing name -> RealTrojans (or viruses/worms, whatever). Sales are UP!

  9. WARNING MS SHILL by Anonymous Coward · · Score: 5, Funny

    Nobody uses Vista because Vista's not compatible with Windows.

  10. No need to worry! - Screen shot of virus. by Anonymous Coward · · Score: 1, Funny

    You have been infected by a RealPlayer virus! Muahahah! In 5 seconds, your hard drive will be form ...buffering... ...buffering... ...buffering...

  11. Worried? Nah by jdjbuffalo · · Score: 2, Funny

    All 5 people who still have Real Player installed are in for a world of hurt...

    --
    We have four boxes with which to defend our freedom: the soap box, the ballot box, the jury box, and the cartridge box.
  12. browser, -noun, a person or thing that browses by piratesyarr · · Score: 2, Funny

    The flaw is causing drive-by malware downloads when an IE user simply browsers to a maliciously rigged Web page.

    I like the use of the word browser as a verb.
    Also, drive-by malware downloads? This hood is no longer safe, yo!

    --
    Small though it is, the human brain can be quite effective when used properly.
  13. I suppose, it's a buffering ... by Anonymous Coward · · Score: 5, Funny

    overflow exploit, right?

  14. Oh, relax.... by Foerstner · · Score: 4, Funny

    You seem to be inexplicably tense. Perhaps you should relax for a while and watch a television program.

    Or go to the theater, and watch a play. If you have any trouble understanding it, you might find more in the program they give you. Hold on to it, they're collectible.

    Whatever you do, though, don't rely on alcohol to relieve your anxiety. If you become dependant on it, you may need a twelve-step program to get yourself back on track.

    --
    The US free market: two halves of a government-granted duopoly are free to set the market price.
  15. You are attempting to laud Vista on slashdot by Anonymous Coward · · Score: 1, Funny

    [Cancel] or [Allow] ?

  16. Re:"Browsers to a maliciously rigged Web page" by Actually,+I+do+RTFA · · Score: 2, Funny

    Come on, I love verbing words.

    --
    Your ad here. Ask me how!