CVEvulnerability

CVE-2008-5911

10.0 HIGH Published 2009-01-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-01-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request.

Affected configurations

• realnetworks helix server 11.0 • realnetworks helix server 12.0.0 • realnetworks helix server mobile 11.0 • realnetworks helix server mobile 12.0.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References