NVD

Id
7736  
Name
CVE-2011-0694  
Description
RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrowser function.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-02-21  
Modified Date
2011-09-21  
Seq
2011-0694  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
43856 7736 CVE-2011-0694 http://docs.real.com/docs/security/SecurityUpdate020811RPE.pdf  View
43857 7736 CVE-2011-0694 8098  View
43858 7736 CVE-2011-0694 http://service.real.com/realplayer/security/02082011_player/en/  View
43859 7736 CVE-2011-0694 20110208 ZDI-11-076: RealNetworks Real Player Predictable Temporary File Remote Code Execution Vulnerability  View
43860 7736 CVE-2011-0694 1025058  View
43861 7736 CVE-2011-0694 http://www.zerodayinitiative.com/advisories/ZDI-11-076  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31008 JVNDB-2011-001247 RealNetworks RealPlayer における任意のコードを実行される脆弱性 RealNetworks RealPlayer は、一時ファイルに予測可能な名前を使用しているため、クロスドメインスクリプティング攻撃を誘発され、任意のコードを実行される脆弱性が存在します。 CVE-2011-0694 48601 CVE-2011-0694 7736 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001247.html 2011-02-08 2011-03-17 View