CVE-2003-1509

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-12-31 · updated 2026-06-16

Description

Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser.

Affected products

RealNetworks Realone Enterprise Desktop: 6.0.11.774
RealNetworks Realone Player: 2.0, 6.0.11.818, 6.0.11.830, 6.0.11.841, 6.0.11.853

References

http://service.real.com/help/faq/security/securityupdate_october2003.html
http://www.securityfocus.com/bid/8839
https://exchange.xforce.ibmcloud.com/vulnerabilities/13445
http://service.real.com/help/faq/security/securityupdate_october2003.html
http://www.securityfocus.com/bid/8839
https://exchange.xforce.ibmcloud.com/vulnerabilities/13445

Get alerted when CVE-2003-1509 or the next vulnerability affects your stack