Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying a local file in a NavigateToURL action, as demonstrated by a local skin file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RealNetworks RealPlayer HandleAction方法跨域脚本攻击漏洞
Vulnerability Description
RealPlayer是Real Networks公司发布和维护的一个软件包，可以用来播放Real Media格式编码的多媒体文件。 RealNetworks RealPlayer 11.0至11.1版本，RealPlayer SP 1.0至1.1.5版本，以及RealPlayer Enterprise 2.1.2版本的某个ActiveX控件中的HandleAction方法中存在跨域脚本攻击漏洞。远程攻击者可以通过指定NavigateToURL操作中的本地文件，向本地域注入任意web脚本或者HTML。
CVSS Information
N/A
Vulnerability Type
N/A