CVE-2002-1643 Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE...
HighCVSS 7.5
EPSS 74.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks helix universal server | = 9.0 | No fix listed |
| realnetworks helix universal server | = 9.0.2.768 | No fix listed |
References
- VU#974689 patch third-party-advisory us-government-resource
- www.nextgenss.com vendor-advisory
- 20021220 RealNetworks HELIX Server Buffer Overflow Vulnerabilities (#NISR20122002) mailing-list vendor-advisory
- 6454 exploit patch vdb-entry
- 6456 patch vdb-entry
- 6458 patch vdb-entry
- www.service.real.com patch
- helix-rtsp-setup-bo(10915) vdb-entry
- helix-rtsp-describe-bo(10916) vdb-entry
- helix-http-get-bo(10917) vdb-entry