CVEvulnerability
CVE-2010-1317
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-04-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data.
Affected configurations
• realnetworks helix dna server 11.0
• realnetworks helix dna server 11.1
• realnetworks helix dna server 11.1.2
• realnetworks helix dna server 11.1.3
• realnetworks helix dna server 12.0
• realnetworks helix dna server 13.0
• realnetworks helix server 11.0
• realnetworks helix server 11.1
• realnetworks helix server 12.0.0
• realnetworks helix server 13.0.0
• realnetworks helix server mobile 11.0
• realnetworks helix server mobile 12.0.0
• realnetworks helix server mobile 13.0.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/39279 Vendor Advisory
- http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf Vendor Advisory
- http://www.securityfocus.com/bid/39490 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0889 Vendor Advisory
- http://secunia.com/advisories/39279 Vendor Advisory
- http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf Vendor Advisory
- http://www.securityfocus.com/bid/39490 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0889 Vendor Advisory