EIP-2026-117836

This exploit leverages a vulnerability in Real Player v.20.0.8.310's G2 Control component, allowing remote code execution via 'javascript:' URIs passed to the 'DoGoToURL()' method. The PoC plants an HTA file in the user's startup folder, which executes on next logon or boot.