RealNetworks fails to address a Cross-Site Scripting vulnerability in RealOne Player.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32465/realnetxss.txt
Source: https://packetstormsecurity.com/files/32465/realnetxss.txt.html