Total vulnerabilities in the database
Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.
Software | From | Fixed in |
---|---|---|
realnetworks / realone_player | 2.0 | 2.0.x |
realnetworks / realone_player | 1.0 | 1.0.x |
realnetworks / realplayer | 10.5 | 10.5.x |
realnetworks / realplayer | 10.0 | 10.0.x |
realnetworks / realplayer | 10.0-beta | 10.0-beta.x |