CVE-2010-4596 Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code v...
HighCVSS 9.3
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realnetworks helix server | = 12.0.0 | No fix listed |
| realnetworks helix server | = 12.0.1 | No fix listed |
| realnetworks helix server | = 13.0.0 | No fix listed |
| realnetworks helix server | = 13.1.1 | No fix listed |
| realnetworks helix server | = 14.0.0 | No fix listed |
| realnetworks helix server | = 14.0.1 | No fix listed |
| realnetworks helix mobile server | = 12.0 | No fix listed |
| realnetworks helix mobile server | = 13.1.1 | No fix listed |
| realnetworks helix mobile server | = 14.0.0 | No fix listed |
| realnetworks helix mobile server | = 14.0.1 | No fix listed |
References
- docs.real.com vendor-advisory
- 20110331 RealNetworks Helix DNA Server RTSP Stack Buffer Overflow third-party-advisory
- 47109 vdb-entry