CVE-2011-1426
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 5.0%
The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the filename specified in the first argument, which allows remote attackers to execute arbitrary code via a .rnx filename corresponding to a crafted RNX file.
Produtos afetados
n/a · n/aReferências
http://securitytracker.com/id?1025351http://service.real.com/realplayer/security/04122011_player/en/https://exchange.xforce.ibmcloud.com/vulnerabilities/66728http://www.securityfocus.com/archive/1/517470/100/0/threadedhttp://www.securityfocus.com/bid/47335http://www.vupen.com/english/advisories/2011/0979http://zerodayinitiative.com/advisories/ZDI-11-122/