Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a " (double quote) in an argument to the RecordClip method, aka "parameter injection."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RealNetworks RealPlayer RecordClip类函数代码注入漏洞
Vulnerability Description
RealNetworks RealNetworks RealPlayer是美国RealNetworks公司开发的一套媒体播放器产品。该产品提供下载/转换视频（在网页中）、编辑视频、管理媒体文件等功能。 RealNetworks RealPlayer 11.0至11.1版本和RealPlayer SP 1.0至1.1版本中的browser-plugin实现中存在代码注入漏洞。远程攻击者可借助RecordClip类函数中参数的"（双引号）在客户端机器上下载任意程序并执行该程序。
CVSS Information
N/A
Vulnerability Type
N/A