CVE-2004-0273

CVE-2004-0273 describes a directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop. An attacker can upload arbitrary files via an RMP file containing .. sequences in a .rjs skin file, enabling remote unauthorized file placement. Affected products are...

Directory traversal in RealPlayer allows code execution

OVERVIEW ======== RealPlayer is a popular multimedia player developed by RealNetworks. One of its features are RMP files, RealJukebox Metadata Packages. These are XML formatted files which may contain e.g. playlists, references to skin files .rjs, and information about related web pages. A...

Multiple Real media players fail to properly validate RMP files

Overview Multiple Real media players fail to properly validate RealJukebox Metadata Package RMP files which may permit an attacker to download and execute arbitrary code on the user's system. Description RealNetworks Real media players are multimedia applications that allow users to view local an...