RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2003-09-03T04:00:00
Updated: 2024-08-08T02:05:12.494Z
Reserved: 2003-09-02T00:00:00
Link: CVE-2003-0726
Vulnrichment
No data.
NVD
Status : Modified
Published: 2003-10-20T04:00:00.000
Modified: 2024-11-20T23:45:23.067
Link: CVE-2003-0726
Redhat
No data.