lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <cf4d66b90912291127r6386f740jae6a3512629fb5ba@mail.gmail.com> Date: Tue, 29 Dec 2009 19:27:42 +0000 From: Hacxx 20 <hacxx20@...il.com> To: full-disclosure@...ts.grok.org.uk Subject: Another Bug in RealPlayer Plus 11 Another Bug in RealPlayer Plus 11 Dec 29, 2009 -- Affected Vendors: Real Networks -- Affected Products: RealPlayer Plus 11 -- Vulnerability Details: After instalation of RealPlayer Plus 11 is possible to iniciate Real Player while viewing a website using HTML and Internet Explorer 8. It loads up a website of our choice with real Player via RNX File Processor. This can be used with the previous bug i reported to iniciate already installed malware. -- Dificulty Level: Low -- Vendor Response: None -- Solution: Upgrade to version 12 -- About Hacxx Available at WinXP for TECH users (Part 3) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists