CVEvulnerability
CVE-2009-2534
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-07-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (daemon crash) via an RTSP SETUP request that (1) specifies the / URI or (2) lacks a / character in the URI.
Affected configurations
• realnetworks helix server (<= 12.0.1)
• realnetworks helix server 11.0
• realnetworks helix server 12.0.0
• realnetworks helix server mobile (<= 12.0.0)
• realnetworks helix server mobile 11.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf docs.real.com
- http://osvdb.org/55982 osvdb.org
- http://www.coresecurity.com/content/real-helix-dna Exploit
- http://www.exploit-db.com/exploits/9198 www.exploit-db.com
- http://www.securityfocus.com/archive/1/505083/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35732 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1947 www.vupen.com
- http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf docs.real.com
- http://osvdb.org/55982 osvdb.org
- http://www.coresecurity.com/content/real-helix-dna Exploit
- http://www.exploit-db.com/exploits/9198 www.exploit-db.com
- http://www.securityfocus.com/archive/1/505083/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35732 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1947 www.vupen.com