CVE-2022-32269

Real Player 20.0.8.310’s G2 Control allows injection of unsafe javascript: URIs into local HTTP error pages (displayed by the IE core), enabling arbitrary code execution. This is consistently described across CVE sources (NVD, RH Red Hat, CNNVD, PRION, etc.). A practical remediation noted in PT-2...