EUVD-2011-1431

Malware in sbrugna...

CVE-2016-3987: Improper Access Control

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to 1 api/openUrlInDefaultBrowser or 2 api/showSB...

PT-2016-3212

Name of the Vulnerable Software and Affected Versions Trend Micro Password Manager affected versions not specified Description The issue is related to insufficient access control in the HTTP server of Trend Micro Password Manager. It allows a remote attacker to execute arbitrary commands through...

RealNetworks RealPlayer 'OpenURLInDefaultBrowser()' Code Execution Vulnerability (Windows)

This host is installed with RealPlayer which is prone to Code Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayercodeexecvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ RealNetworks RealPlayer 'OpenURLInDefaultBrowser' Code Execution Vulnerability Windows Authors: Madhuri D...

CVE-2011-1426

The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the filename specified in the first argument, which allows remote attackers to execute arbitrary code via a .rnx filename...

CVE-2011-1426: Undefined Security Weakness

The OpenURLInDefaultBrowser method in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, launches a default handler for the filename specified in the first argument, which allows remote attackers to execute arbitrary code via a .rnx filename...

ZDI-11-122: RealNetworks RealPlayer OpenURLInDefaultBrowser Remote Code Execution Vulnerability

ZDI-11-122: RealNetworks RealPlayer OpenURLInDefaultBrowser Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-122 April 12, 2011 -- CVE ID: CVE-2011-1426 -- CVSS: 9.7, AV:N/AC:L/Au:N/C:C/I:P/A:C -- Affected Vendors: RealNetworks -- Affected Products:...

RealPlayer for Windows < Build 12.0.1.647 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities : - The OpenURLInDefaultBrowser method will open and execute the first parameter based on the operating system's default handler for the filetype and is accessible...

PT-2011-3121

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer versions 14.0.0 through 14.0.2 RealPlayer SP versions 1.0 through 1.1.5 Description The issue allows remote attackers to execute arbitrary code via a .rnx filename corresponding to a crafted RNX...

RealNetworks RealPlayer OpenURLInDefaultBrowser Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within RealPlay...