299,455
Total vulnerabilities in the database
Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.
| Software | From | Fixed in |
|---|---|---|
| realnetworks / realone_player | 2.0 | 2.0.x |
| realnetworks / realone_player | 1.0 | 1.0.x |
| realnetworks / realplayer | 10.5 | 10.5.x |
| realnetworks / realplayer | 10.0 | 10.0.x |
| realnetworks / realplayer | 10.0-beta | 10.0-beta.x |