4.3
CVSSv2

CVE-2011-2947

Published: 18/08/2011 Updated: 06/10/2011
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 up to and including 11.1 and 14.0.0 up to and including 14.0.5 and RealPlayer SP 1.0 up to and including 1.1.5 allows remote malicious users to inject arbitrary web script or HTML in the Local Zone via a local HTML document.

Vulnerable Product Search on Vulmon Subscribe to Product

realnetworks realplayer 11.0

realnetworks realplayer 11.1

realnetworks realplayer 14.0.1

realnetworks realplayer 14.0.2

realnetworks realplayer 14.0.0

realnetworks realplayer 14.0.3

realnetworks realplayer 14.0.4

realnetworks realplayer 14.0.5

realnetworks realplayer sp 1.0.1

realnetworks realplayer sp 1.1.5

realnetworks realplayer sp 1.0.0

realnetworks realplayer sp 1.1.4

realnetworks realplayer sp 1.1

realnetworks realplayer sp 1.1.2

realnetworks realplayer sp 1.1.1

realnetworks realplayer sp 1.1.3

realnetworks realplayer sp 1.0.5

realnetworks realplayer sp 1.0.2