PT-2009-4935 · Realnetworks · Helix Mobile Server+1

Damian Frizza · Published 2009-07-20 · Updated 2018-10-10 · CVE-2009-2533

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server versions prior to 13.0.0 RealNetworks Helix Mobile Server versions prior to 13.0.0

Description The issue allows remote attackers to cause a denial of service, resulting in the daemon exiting. This is achieved by sending multiple RTSP SET PARAMETER requests with empty DataConvertBuffer headers.

Recommendations For RealNetworks Helix Server versions prior to 13.0.0, update to version 13.0.0 or later. For RealNetworks Helix Mobile Server versions prior to 13.0.0, update to version 13.0.0 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-2533

Affected Products

Helix Mobile Server

Helix Server

References · 9

• 🔥 http://exploit-db.com/exploits/9198 · Exploit
• 🔥 https://exploit-db.com/exploits/9198 · Exploit
• 🔥 http://coresecurity.com/content/real-helix-dna · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-2533 · Security Note
• http://securityfocus.com/archive/1/505083/100/0/threaded · Note
• http://vupen.com/english/advisories/2009/1947 · Note
• http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf · Note
• http://securityfocus.com/bid/35731 · Note
• http://osvdb.org/55981 · Note