CVEvulnerability

CVE-2010-4235

10.0 HIGH Published 2011-04-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-04-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-134

Description

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

Affected configurations

• realnetworks helix server 12.0.0 • realnetworks helix server 12.0.1 • realnetworks helix server 13.0.0 • realnetworks helix server 13.1.1 • realnetworks helix server 14.0.0 • realnetworks helix server 14.0.1 • realnetworks helix mobile server 12.0 • realnetworks helix mobile server 13.1.1 • realnetworks helix mobile server 14.0.0 • realnetworks helix mobile server 14.0.1

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References