| Package | Affected versions | Patched versions |
|---|---|---|
| realone enterprise desktop | = 6.0.11.774 | |
| realone player | = 2.0= 6.0.10.505= 6.0.11.818= 6.0.11.830= 6.0.11.841= 6.0.11.853 |
RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free