Re: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows

[Elazar Broad <elazarb () earthlink net>]

Supposedly Real fixed the Import() method overflow in October, http://secunia.com/advisories/27248/, I guess not, or it 
is no longer exploitable(I haven't tested it). Anyhow, that still leaves the ones that Shinnai found among others, and 
the PlayerProperty() method that I posted yesterday. 

Elazar

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/