CVE-2004-1798: Realnetworks Realone Enterprise Desktop

Medium severity, CVSS 5.1. EPSS: 2.2% chance of exploitation in the next 30 days.

RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726.

Affected products

• Realnetworks Realone Enterprise Desktop: version 6.0.11.774 only
• Realnetworks Realone Player: version 1.0 only; version 2.0 only; version 6.0.10.505 only; version 6.0.11.818 only; version 6.0.11.830 only; version 6.0.11.841 only; …
• Realnetworks Realplayer: version 8.0 only

Published 2004-12-31. Last modified 2026-06-16.