It’s also positive that it’s been disclosed and patched on all four players cited: The fact researchers discovered the issue before attackers exploited it is a thumbs-up. Media players have been a rich hunting ground for security researchers and attackers over the years, but finding a fundamental issue affecting several products at the same time is highly unusual.
In fact, this is not a vulnerability so much as a new class of vulnerability that affects one type of software with the same results – the user is pwned without doing anything, hence the “zero resistance” moniker.
