Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 up to and including 11.1 and 14.0.0 up to and including 14.0.5, RealPlayer SP 1.0 up to and including 1.1.5, and RealPlayer Enterprise 2.0 up to and including 2.1.5 allows remote malicious users to inject arbitrary web script or HTML in the Local Zone via a local HTML document, a different vulnerability than CVE-2011-2947.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
realnetworks realplayer 11.0 |
||
realnetworks realplayer 11.1 |
||
realnetworks realplayer 14.0.1 |
||
realnetworks realplayer 14.0.3 |
||
realnetworks realplayer 14.0.4 |
||
realnetworks realplayer 14.0.5 |
||
realnetworks realplayer 14.0.0 |
||
realnetworks realplayer 14.0.2 |
||
realnetworks realplayer sp 1.0.0 |
||
realnetworks realplayer sp 1.1.3 |
||
realnetworks realplayer sp 1.1.5 |
||
realnetworks realplayer sp 1.1.1 |
||
realnetworks realplayer sp 1.0.5 |
||
realnetworks realplayer sp 1.0.2 |
||
realnetworks realplayer sp 1.1.4 |
||
realnetworks realplayer sp 1.0.1 |
||
realnetworks realplayer sp 1.1.2 |
||
realnetworks realplayer sp 1.1 |
||
realnetworks realplayer 2.1.3 |
||
realnetworks realplayer 2.1.4 |
||
realnetworks realplayer 2.1.5 |
||
realnetworks realplayer 2.0 |
||
realnetworks realplayer 2.1 |
||
realnetworks realplayer 2.1.2 |
Vulmon