AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2010-4396

MEDIUM · CVSS 4.3 EPSS 1.16%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-12-14 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2010-4396
Severity
MEDIUM
CVSS
4.3
EPSS
1.16%

Original Filing — NVD Description

Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying a local file in a NavigateToURL action, as demonstrated by a local skin file.