Attacks started on users of Internet Explorer and RealPlayer 0day exploit.

I haven’t really heard of many RealPlayer exploits, however this zero day one is a nasty. This is an Internet Explorer exploit only, so if you’re using FireFox you’re in luck.

I haven’t really heard of many RealPlayer exploits, however this zero day one is a nasty. This is an Internet Explorer exploit only, so if you’re using FireFox you’re in luck.

October 19, 2007 (Computerworld) — Attackers are exploiting a zero-day vulnerability in RealPlayer in order to infect Windows machines running Internet Explorer, Symantec Corp. said late Thursday. The security company issued an alert that rated the threat with its highest possible score.

According to a warning issued to customers of its DeepSight threat network, Symantec said an ActiveX control installed by RealNetworks Inc.’s RealPlayer program is flawed. When combined with Microsoft Corp.’s Internet Explorer (IE) browser — which relies on ActiveX controls to extend its functionality — the bug can be exploited and malicious code downloaded to any PC that wanders to a specially crafted site.

Only systems on which both RealPlayer and IE have been installed are vulnerable.

Read the full article at computerworld.com


Did you like this article?


0 Shares:
You May Also Like

Ubuntu 7.10 (Gutsy Gibbon) Release Candidate

The Release Candidate for Ubuntu 7.10 (Gutsy Gibbon) has been released, you can download it here: http://releases.ubuntu.com/releases/gutsy/ The following is a little information from their site:
Announcing the Release Candidate for Ubuntu 7.10 The Ubuntu team is proud to announce the Release Candidate for version 7.10 of Ubuntu, Kubuntu, Edubuntu, Gobuntu, and Xubuntu codenamed "Gutsy Gibbon". The Release Candidate includes installable live Desktop CDs, server images, alternate text-mode installation CDs, and an upgrade wizard for users of the current stable release. We consider this release candidate to be complete, stable, and suitable for testing by any user.
Read More