CVE-2004-0389 RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_P...
HighCVSS 7.5
EPSS 54.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks helix universal server | = 9.0.1 | No fix listed |
| realnetworks helix universal server | = 9.0.2 | No fix listed |
References
- 11395 broken-link third-party-advisory vendor-advisory
- 20040415 RealNetworks Helix Universal Server Denial of Service Vulnerability broken-link exploit patch third-party-advisory vendor-advisory
- 10157 broken-link exploit third-party-advisory vdb-entry
- helix-get-dos(15880) third-party-advisory vdb-entry