Slashdot Mirror
RealPlayer Zero-Day Flaw Under Attack
openOption writes "ZDNet is reporting that hackers are actively exploiting a zero-day hole in RealNetworks' RealPlayer media player, a software program installed on tens of millions of Windows computers worldwide. The in-the-wild attacks targets a previously unknown and unpatched ActiveX vulnerability in the way RealPlayer interacts with Microsoft's Internet Explorer browser. The flaw is causing drive-by malware downloads when an IE user simply browsers to a maliciously rigged Web page."
Used by no one... until now.
a software program
I like software programs. They run well on my computer PC and look nice on my display monitor. My computer PC works well, all the way from the electric power cable to the Ethernet network card, the hard disk hard drive, and my wireless keyboard keyboard and mouse mouse.
(What are synonyms for keyboard and mouse?)
God, I'm so glad I bought a computer with Windows XPN, which thanks to the wisdom of the European Union and RealNetworks' claims of unfair competition against their cuasi-malware player, does not include Windows Media Player! Yes, instead the OEM installed... oh, wait. They installed RealPlayer. Holy sh #$!@&*^} NO CARRIER
Web2.0: I love when people Flickr my cuil and digg my boingboing until my google is reddit and I start to yahoo
The vulnerability doesn't affect IE in protected (sandboxed, default) mode on Vista, of course.
It's time to realise that Abble's products are the biggest abomination these days. Just say NO to the dumb iAbble way!!
...that the viruses using this attack were still easier to uninstall than RealPlayer itself.
Before you mod me funny, think, perhaps I was insightfully funny?
Real has posted a video press release on this. I would like to tell you more, but it's still buffering. Maybe they should use Media Player for their press releases.
Gamingmuseum.com: Give your 3D accelerator a rest.
http://www.free-codecs.com/download/Real_Alternative.htm
Now I just have to worry about unpatched holes in Windows Media Player!
Truthfully, I already have one bloated Media Player that is part of the OS on my machine, why would I want to install another?
BTW:
http://www.free-codecs.com/download/QuickTime_Alternative.htm
To take care of that OTHER bloated media player
Nobody uses Vista because Vista's not compatible with Windows.
I love Real Player. Its icon is pretty and when I click on some things on the internet it works sometimes for me. If it dose not work I just figure that the people putting that bad stuff on the internet must not know what a wonderful company Microsoft is for people like me. Now if you will excuse me I need to click on something real fast so AOL doe not disconnect me again. All I need is MS programs that I can use while online with AOL with my wonderful CABLE COMPANY connection to the internet.
Why is it so hard to only have politicians for a few years, then have them go away?
overflow exploit, right?
I can't speak about the windows version, but the OS X implementation of the free player is actually very nice to use indeed: fast and lightweight. It's the format I choose for listening to and watching BBC streaming feeds.
You seem to be inexplicably tense. Perhaps you should relax for a while and watch a television program.
Or go to the theater, and watch a play. If you have any trouble understanding it, you might find more in the program they give you. Hold on to it, they're collectible.
Whatever you do, though, don't rely on alcohol to relieve your anxiety. If you become dependant on it, you may need a twelve-step program to get yourself back on track.
The US free market: two halves of a government-granted duopoly are free to set the market price.
Ring 0 only adds stealth to attacks that work just fine from ring 3.
I am a leaf on the wind. Watch how I soar.