EIP-2026-116162

This exploit targets a buffer overflow vulnerability in the RealPlayer ActiveX control by supplying an excessively long string to the 'PlayerProperty' method, potentially leading to arbitrary code execution. The PoC uses JavaScript to trigger the vulnerability when the page loads.