Description
The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remote attackers to cause a denial of service (browser crash) via a certain argument to the GetSourceTransport method.
References
- 26660 vdb-entry
- 20071129 DOS in Realplayer 11 ActiveX on Win Vista and Win XP SP2 mailing-list
- 3415 third-party-advisory
- http://www.safehack.com/Advisory/realpdos.txt
- realplayer-realaudioobjects-dos(38778) vdb-entry