CVE-2004-1798 in RealOne Player
Summary
RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
05/04/2005
Disclosure
12/31/2004
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 251 | RealNetworks RealOne Player SMIL File containing Remote Code Execution | Proof-of-Concept | Official fix | CVE-2004-1798 |