RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via default settings of earlier Internet Explorer browsers.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Realone_player | Realnetworks | 1.0 (including) | 1.0 (including) |
| Realone_player | Realnetworks | 2.0 (including) | 2.0 (including) |
| Realplayer | Realnetworks | * | * |
| Realplayer | Realnetworks | 8.0 (including) | 8.0 (including) |
| Realplayer | Realnetworks | 10.0 (including) | 10.0 (including) |
| Realplayer | Realnetworks | 10.5_6.0.12.1040_1069 (including) | 10.5_6.0.12.1040_1069 (including) |
| Helix-player | Ubuntu | dapper | * |
| Helix-player | Ubuntu | devel | * |
| Helix-player | Ubuntu | edgy | * |
| Helix-player | Ubuntu | feisty | * |