Hi All,

RealOne Player Allows Cross Zone and Domain Access  27-08-2003 

Using a SMIL presentation, an attacker can instruct the RealOne player to
load a series of URLs. If the attacker specifies a scripting protocol as
the URL, the script executes in the context of the previous URL. 

more HERE:
http://www.digitalpranksters.com/advisories/realnetworks/smilscriptprotocol.html



--- FMail/Win32 1.60