usrbingeek’s musings
Lockergnome
Home
Author Avatar

Yet Another Reason To Uninstall RealPlayer

US-CERT is reporting that they are aware of another vulnerability in RealPlayer on Windows.

This vulnerability is due to improper handling of the “Console” property in the RealPlayer ActiveX control (rmoc3260.dll). Exploitation of this vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code.

While US-CERT recommends disabling Active-X and securing your browser, which is not bad advice, I’d make the broader recommendation of uninstalling RealPlayer and encouraging web developers to stop using it to stream audio and video on their web sites.

RealPlayer has been and continues to be an awful mess of bundled and unstable software that’s often open to security vulnerabilities and has even been labeled as badware. Today when there are so many more user friendly methods for streaming audio and video using Real is completely out of touch and stupid.

[RealPlayer ActiveX Vulnerability]

Tags: , , ,

What are your thoughts?

cerberus - March 21, 2008 @ 4:23 pm

Wow,I didn’t know that about RealPlayer! I actually kinda liked the program,but now that you mention this problem,I might have to stop using it…thanks for this update ;)

Freekie - March 22, 2008 @ 3:12 am

Ive never been a big fan of real player… what is it still used for now a days that most stuff is done though flash?

texastony - March 23, 2008 @ 5:42 pm

Why can’t RealPlayer just die already? They have never been that good and they never will be. I haven’t run into a site in years that requires me to use it and I doubt that I will. It’s time RealPlayer dies.

What do you think?

RSS feed for comments on this post

All Comments and Trackbacks are moderated (unless you're a registered user). Regardless, this page will refresh when your submission is entered.

*
To prove you're a person (not a spam script), type the security word shown in the picture.
Anti-Spam Image