CVE-2003-0726

RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag.

CVSS v2.0

5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

6.83% chance of exploitation in the next 30 days, 94th percentile

Published

2003-09-03

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23043

References

• CVE Record
• NVD entry

Related

• CVE-2003-0725
• CVE-2003-0727
• CVE-2003-0723
• CVE-2003-0729
• CVE-2003-0722
• CVE-2003-0735