| Package | Affected versions | Patched versions |
|---|---|---|
| realone enterprise desktop | = 6.0.11.774 | |
| realone player | = 1.0= 2.0= 6.0.10.505= 6.0.11.818= 6.0.11.830= 6.0.11.841= 6.0.11.853= 6.0.11.868 | |
| realplayer | = 8.0 |
RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free