PT-2009-4935 · Realnetworks · Helix Mobile Server+1

Damian Frizza · Publicado 2009-07-20 · Atualizado 2018-10-10 · CVE-2009-2533

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server versions prior to 13.0.0 RealNetworks Helix Mobile Server versions prior to 13.0.0

Description The issue allows remote attackers to cause a denial of service, resulting in the daemon exiting. This is achieved by sending multiple RTSP SET PARAMETER requests with empty DataConvertBuffer headers.

Recommendations For RealNetworks Helix Server versions prior to 13.0.0, update to version 13.0.0 or later. For RealNetworks Helix Mobile Server versions prior to 13.0.0, update to version 13.0.0 or later.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-2533

Produtos afetados

Helix Mobile Server

Helix Server

Referências · 9

• 🔥 http://exploit-db.com/exploits/9198 · Exploit
• 🔥 https://exploit-db.com/exploits/9198 · Exploit
• 🔥 http://coresecurity.com/content/real-helix-dna · Exploit
• http://securityfocus.com/archive/1/505083/100/0/threaded · Nota
• http://vupen.com/english/advisories/2009/1947 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2533 · Nota de Segurança
• http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf · Nota
• http://securityfocus.com/bid/35731 · Nota
• http://osvdb.org/55981 · Nota