Real Networks RealPlayer ActiveX control (CVE-2010-4396) Cross-Zone Scripting Vulnerability
BID:45464
Info
Real Networks RealPlayer ActiveX control (CVE-2010-4396) Cross-Zone Scripting Vulnerability
| Bugtraq ID: | 45464 |
| Class: | Design Error |
| CVE: |
CVE-2010-4396 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 10 2010 12:00AM |
| Updated: | Dec 10 2010 12:00AM |
| Credit: | Anonymous |
| Vulnerable: |
RealNetworks RealPlayer SP 1.1.5 RealNetworks RealPlayer SP 1.1.4 RealNetworks RealPlayer SP 1.0.5 RealNetworks RealPlayer SP 1.0.2 RealNetworks RealPlayer SP 1.0.1 RealNetworks RealPlayer SP 1.0 RealNetworks RealPlayer SP 1.1.3 RealNetworks RealPlayer SP 1.1.2 RealNetworks RealPlayer SP 1.1.1 RealNetworks RealPlayer SP 1.1 RealNetworks RealPlayer Enterprise 2.1.2 RealNetworks RealPlayer 11 Beta 6.0.14 .550 RealNetworks RealPlayer 11.0.5 RealNetworks RealPlayer 11.0.4 RealNetworks RealPlayer 11.0.3 RealNetworks RealPlayer 11.0.2 RealNetworks RealPlayer 11.0.1 RealNetworks RealPlayer 14.0.0 RealNetworks RealPlayer 12.0.0.343 RealNetworks RealPlayer 12.0.0.1548 RealNetworks RealPlayer 12.0.0.1444 RealNetworks RealPlayer 11.1 RealNetworks RealPlayer 11.0.2.2315 RealNetworks RealPlayer 11.0.2.1744 RealNetworks RealPlayer 11 Beta RealNetworks RealPlayer 11 |
| Not Vulnerable: |
RealNetworks RealPlayer Enterprise 2.1.3 RealNetworks RealPlayer Enterprise 2.1.4 RealNetworks RealPlayer 14.0.1 |
Exploit / POC
Real Networks RealPlayer ActiveX control (CVE-2010-4396) Cross-Zone Scripting Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Real Networks RealPlayer ActiveX control (CVE-2010-4396) Cross-Zone Scripting Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
Real Networks RealPlayer ActiveX control (CVE-2010-4396) Cross-Zone Scripting Vulnerability
References:
References:
- RealPlayer Homepage (Real Networks)
- Dec 10, 2010: RealNetworks, Inc. Releases Update to Address Security Vulnerabili (Real Networks)
- RealNetworks RealPlayer Cross-Zone Scripting Remote Code Execution Vulnerability (TippingPoint Zero Day Initiative)
- ZDI-10-275: RealNetworks RealPlayer Cross-Zone Scripting Remote Code Execution V (ZDI Disclosures