PT-2009-1387 · Realnetworks · Helix Server+1

Publicado 2009-01-20 · Atualizado 2011-03-08 · CVE-2008-5911

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server and Helix Mobile Server versions 11.x through 11.1.7 RealNetworks Helix Server and Helix Mobile Server versions 12.x through 12.0.0

Description The issue allows remote attackers to cause a denial of service or execute arbitrary code. This can be achieved through various means, including crafted RTSP SETUP commands, an NTLM authentication request with malformed base64-encoded data, an RTSP DESCRIBE command, or a DataConvertBuffer request.

Recommendations For versions 11.x through 11.1.7, update to version 11.1.8 or later. For versions 12.x through 12.0.0, update to version 12.0.1 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-5911

Produtos afetados

Helix Mobile Server

Helix Server

Referências · 8

• http://securitytracker.com/id?1021500 · Nota
• http://vupen.com/english/advisories/2008/3521 · Nota
• http://docs.real.com/docs/security/SecurityUpdate121508HS.pdf · Aviso do Fabricante
• http://securitytracker.com/id?1021499 · Nota
• http://secunia.com/advisories/33360 · Aviso do Fabricante
• http://securitytracker.com/id?1021498 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5911 · Nota de Segurança
• http://securitytracker.com/id?1021501 · Nota