Total vulnerabilities in the database
RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag.
| Software | From | Fixed in |
|---|---|---|
| realnetworks / realone_desktop_manager | - | - |
| realnetworks / realone_player | 6.0.11.841 | 6.0.11.841.x |
| realnetworks / realone_player | 2.0 | 2.0.x |
| realnetworks / realone_enterprise_desktop | 6.0.11.774 | 6.0.11.774.x |
| realnetworks / realone_player | 6.0.11.830 | 6.0.11.830.x |
| realnetworks / realone_player | 6.0.10.505-gold | 6.0.10.505-gold.x |
| realnetworks / realone_player | 6.0.11.818 | 6.0.11.818.x |
| realnetworks / realone_player | 6.0.11.853 | 6.0.11.853.x |