CVEvulnerability
CVE-2010-4596
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-04-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request.
Affected configurations
• realnetworks helix server 12.0.0
• realnetworks helix server 12.0.1
• realnetworks helix server 13.0.0
• realnetworks helix server 13.1.1
• realnetworks helix server 14.0.0
• realnetworks helix server 14.0.1
• realnetworks helix mobile server 12.0
• realnetworks helix mobile server 13.1.1
• realnetworks helix mobile server 14.0.0
• realnetworks helix mobile server 14.0.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://docs.real.com/docs/security/SecurityUpdate033111HS.pdf Vendor Advisory
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=899 labs.idefense.com
- http://www.securityfocus.com/bid/47109 www.securityfocus.com
- http://docs.real.com/docs/security/SecurityUpdate033111HS.pdf Vendor Advisory
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=899 labs.idefense.com
- http://www.securityfocus.com/bid/47109 www.securityfocus.com