
If you use RealNetworks’ RealPlayer software, you might want to pay close attention to this demo from the folks at Gleg Ltd., a Russian vulnerability research and exploit creation outfit.
According to Gleg founder Evgeny Legerov, there is a zero-day vulnerability that allows code execution in RealPlayer 11, the most up-to-date version of the cross-platform media player. Legerov said the exploit was tested against RealPlayer 11 build 6.0.14.748.