CVE-2011-1426

RealNetworks RealPlayer OpenURLInDefaultBrowser vulnerability (CVE-2011-1426) affects RealPlayer 11.0–11.1 and 14.0.0–14.0.2, and RealPlayer SP 1.0–1.1.5. The OpenURLInDefaultBrowser() method launches the system default handler for the first argument’s filename, enabling remote attackers to execu...

ZDI-11-122: RealNetworks RealPlayer OpenURLInDefaultBrowser Remote Code Execution Vulnerability

ZDI-11-122: RealNetworks RealPlayer OpenURLInDefaultBrowser Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-122 April 12, 2011 -- CVE ID: CVE-2011-1426 -- CVSS: 9.7, AV:N/AC:L/Au:N/C:C/I:P/A:C -- Affected Vendors: RealNetworks -- Affected Products:...

RealPlayer for Windows < Build 12.0.1.647 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities : - The OpenURLInDefaultBrowser method will open and execute the first parameter based on the operating system's default handler for the filetype and is accessible...