SecuritySpace - CVE-2010-4388

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2010-4388

Description: The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-4388
http://www.zerodayinitiative.com/advisories/ZDI-10-276
http://www.zerodayinitiative.com/advisories/ZDI-10-277
http://www.zerodayinitiative.com/advisories/ZDI-10-278
http://osvdb.org/69857
http://osvdb.org/69858
http://osvdb.org/69859
http://www.securitytracker.com/id?1024861

CVE ID:	CVE-2010-4388
Description:	The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4388 http://www.zerodayinitiative.com/advisories/ZDI-10-276 http://www.zerodayinitiative.com/advisories/ZDI-10-277 http://www.zerodayinitiative.com/advisories/ZDI-10-278 http://osvdb.org/69857 http://osvdb.org/69858 http://osvdb.org/69859 http://www.securitytracker.com/id?1024861