Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Realone_enterprise_desktop | Realnetworks | 6.0.11.774 (including) | 6.0.11.774 (including) |
| Realone_player | Realnetworks | 2.0 (including) | 2.0 (including) |
| Realone_player | Realnetworks | 6.0.11.818 (including) | 6.0.11.818 (including) |
| Realone_player | Realnetworks | 6.0.11.830 (including) | 6.0.11.830 (including) |
| Realone_player | Realnetworks | 6.0.11.841 (including) | 6.0.11.841 (including) |
| Realone_player | Realnetworks | 6.0.11.853 (including) | 6.0.11.853 (including) |
References
- http://service.real.com/help/faq/security/securityupdate_october2003.html
- http://www.securityfocus.com/bid/8839
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13445
- http://service.real.com/help/faq/security/securityupdate_october2003.html
- http://www.securityfocus.com/bid/8839
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13445