RealPlayer and RealOne Player are prone to a vulnerability that may allow an attacker to delete arbitrary files on the client computer. Reportedly, if the file to be downloaded already exists on the affected computer, the application proceeds to delete the file. Directory traversal sequences may be used to delete arbitrary files as well. This issue can be exploited with a malicious Web page.
RealPlayer and RealOne Player are prone to a vulnerability that may allow an attacker to delete arbitrary files on the client computer. Reportedly, if the file to be downloaded already exists on the affected computer, the application proceeds to delete the file. Directory traversal sequences may be used to delete arbitrary files as well. This issue can be exploited with a malicious Web page.