CVE-2007-4561 Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
HighCVSS 10.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks helix dna server | = 10.0 | No fix listed |
| realnetworks helix dna server | = 11.0 | No fix listed |
| realnetworks helix dna server | = 11.1 | No fix listed |
| realnetworks helix dna server | = 11.1.2 | No fix listed |
| realnetworks helix dna server | = 11.1.3 | No fix listed |
References
- labs.musecurity.com
- 20070824 [MU-200708-01] Helix DNA Server Heap Corruption mailing-list
- 26609 third-party-advisory
- 3069 third-party-advisory
- 25440 patch vdb-entry
- 1018605 vdb-entry
- ADV-2007-2986 vdb-entry