A vulnerability exists in the IASystemInfo.dll library used by InterActual Player. The risk is MEDIUM. By convincing a
user to view a specially crafted HTML document (e.g., a web page or an HTML email message or attachment), an attacker may be able to
execute arbitrary code with the privileges of the user.

Read More…
Source: CIAC