CVE:CVE-2004-0273
CNNVD:CNNVD-200411-167
ealOne Player，RealOne Player 2.0和RealOne Enterprise Desktop存在目录遍历漏洞。远程攻击者可以借助一个位于.rjs皮肤文件下且包含..（点 点）序列的RMP文件上传任意文件。
solution:Upgrade realnetworks realone_desktop_manager to a higher version than *; Upgrade realnetworks realone_enterprise_desktop to a higher version than 6.0.11.774,and avoid the version 6.0.11.774; Upgrade realnetworks realone_player to a higher version than 1.0,2.0,6.0.11.818,6.0.11.830,6.0.11.841,6.0.11.853,6.0.11.868,and avoid the version 1.0,2.0,6.0.11.818,6.0.11.830,6.0.11.841,6.0.11.853,6.0.11.868