CVE-2011-0694

no score yetEPSS 6.6%

RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which allows remote attackers to conduct cross-domain scripting attacks and execute arbitrary code via the OpenURLinPlayerBrowser function.

EPSS: 6.6% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
Published: 2011-02-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

realnetworks:realplayer
realnetworks:realplayer_sp

References

http://docs.real.com/docs/security/SecurityUpdate020811RPE.pdf
http://osvdb.org/70849
http://secunia.com/advisories/43268
http://securityreason.com/securityalert/8098
http://service.real.com/realplayer/security/02082011_player/en/

Check your stack JSON