Now Real programmed the flaw, but the true culprit is ActiveX. Make no mistake about that. Microsoft and their insecure ActiveX technology lie at the heart of this.
There is a fix available. Real must have jumped through a lot of hoops to do that in such a hurry. Kudos to them for admitting the flaw and fixing it so rapidly. Obviously, Real gets the significance of things like this. A link to the fix is provided at the blog linked to above.