CVE-2011-0694
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 6.6%
RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrowser function.
Affected products
n/a · n/aReferences
http://docs.real.com/docs/security/SecurityUpdate020811RPE.pdfhttp://osvdb.org/70849http://secunia.com/advisories/43268http://securityreason.com/securityalert/8098http://service.real.com/realplayer/security/02082011_player/en/http://www.securityfocus.com/archive/1/516318/100/0/threadedhttp://www.securitytracker.com/id?1025058http://www.zerodayinitiative.com/advisories/ZDI-11-076