EIP-2026-117835

This exploit leverages a directory traversal vulnerability in Real Player's 'external::Import()' method to achieve remote code execution by planting arbitrary files (e.g., 'shdoclc.dll' and 'write.exe') in sensitive locations like the 'startup' folder. The attack requires hosting malicious files on an SMB or WebDav share and exploits unsafe file type handling and path sanitization.