Rule:  --Sid:2412--Summary:This event is generated when a cross-site scripting attempt usingRealNetworks RealPlayer has been successful.--Impact:Cross site scripting, information disclosure.--Detailed Information:A vulnerability exists in versions of RealPlayer from RealNetworks thatmay allow a remote attacker to launch a sucessful cross-site scriptingattack against a host running the application.This event is indicative of a successful attack.--Affected Systems:	RealNetworks RealPlayer	--Attack Scenarios:An attacker can supply a malformed file to the client making the requestand use the vulnerability to gain sensitive information from the host.--Ease of Attack:Simple.--False Positives:None known.--False Negatives:None known.--Corrective Action:Upgrade to the latest non-affected version of the software.--Contributors:Sourcefire Vulnerability Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>-- Additional References:--