PT-2012-2965 · Realnetworks · Helix Mobile Server+1

Publicado 2012-04-17 · Atualizado 2017-12-29 · CVE-2012-0942

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server versions prior to 14.3.x RealNetworks Helix Mobile Server versions prior to 14.3.x

Description The issue is related to a buffer overflow in the rn5auth.dll component, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending crafted authentication credentials.

Recommendations For RealNetworks Helix Server versions prior to 14.3.x, update to version 14.3.x or later to resolve the issue. For RealNetworks Helix Mobile Server versions prior to 14.3.x, update to version 14.3.x or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-0942

ZDI-12-094

Produtos afetados

Helix Mobile Server

Helix Server

Referências · 5

• http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0942 · Nota de Segurança
• http://securitytracker.com/id?1026898 · Nota
• http://securityfocus.com/bid/52929 · Nota
• https://zerodayinitiative.com/advisories/ZDI-12-094 · Nota de Segurança