CVE-2004-1798: Medium severity RealNetworks RealOne Player vulnerability
RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1798?
CVE-2004-1798 is rated as a medium severity vulnerability due to its potential for remote script execution.
How do I fix CVE-2004-1798?
To mitigate CVE-2004-1798, users should update the RealOne player to a version that is not affected by this vulnerability.
What software is affected by CVE-2004-1798?
CVE-2004-1798 affects several versions of the RealOne player and RealPlayer, including versions 6.0.11.868 and earlier.
What type of attack can exploit CVE-2004-1798?
CVE-2004-1798 can be exploited through malicious SMIL presentations that use file:javascript: URLs to execute arbitrary scripts.
Can CVE-2004-1798 affect my system if I don't use RealOne player?
If you do not have any affected versions of RealOne player or RealPlayer installed, CVE-2004-1798 will not pose a risk to your system.