[Full-disclosure] RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows

[Elazar Broad]

Supposedly Real fixed the Import() method overflow in October, http://secunia.com/advisories/27248/, I guess not, or it is no longer exploitable(I haven't tested it). Anyhow, that still leaves the ones that Shinnai found among others, and the PlayerProperty() method that I posted yesterday. 

Elazar