CVE:CVE-2004-1798
CNNVD:CNNVD-200412-909
RealOne player 6.0.11.868版本存在漏洞。远程攻击者可以借助带有"file:javascript:" URL的Synchronized Multimedia Integration Language (SMIL)描述在"My Computer"区域中执行任意脚本，该漏洞在之前载入的URL的安全上下文中被执行，该漏洞不同于CVE-2003-0726。
solution:Upgrade realnetworks realone_enterprise_desktop to a higher version than 6.0.11.774,and avoid the version 6.0.11.774; Upgrade realnetworks realone_player to a higher version than 1.0,2.0,6.0.10.505,6.0.11.818,6.0.11.830,6.0.11.841,6.0.11.853,6.0.11.868,and avoid the version 1.0,2.0,6.0.10.505,6.0.11.818,6.0.11.830,6.0.11.841,6.0.11.853,6.0.11.868; Upgrade realnetworks realplayer to a higher version than 8.0,and avoid the version 8.0