CVE-2003-1509 Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the loca...
HighCVSS 10.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks realone enterprise desktop | = 6.0.11.774 | No fix listed |
| realnetworks realone player | = 2.0 | No fix listed |
| realnetworks realone player | = 6.0.11.818 | No fix listed |
| realnetworks realone player | = 6.0.11.830 | No fix listed |
| realnetworks realone player | = 6.0.11.841 | No fix listed |
| realnetworks realone player | = 6.0.11.853 | No fix listed |
References
- service.real.com
- 8839 patch vdb-entry
- realoneplayer-temporary-script-execution(13445) vdb-entry