CVE-2011-0694 in RealPlayer
Summary
RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrowser function.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56561 | RealNetworks RealPlayer OpenURLinPlayerBrowser memory corruption | 119 | Not defined | Not defined | CVE-2011-0694 |
Reservation
01/31/2011
Disclosure
02/21/2011
Status
Confirmed
Entries
1