The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll as shipped with RealPlayer 11 allows remote attackers to cause a denial of service (browser crash) via a certain argument to the GetSourceTransport method.