RealPlayer Predictable Temporary File Cross Domain Scripting Vulnerability

A vulnerability has been identified in RealPlayer, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error within the temporary file naming scheme used by the application to store references to RM files, which could allow malicious web sites to predict a temporary filename and use it in combination with the "OpenURLinPlayerBrowser()" function of the RealPlayer ActiveX control to execute arbitrary code.