PT-2012-2965 · Realnetworks · Helix Mobile Server+1

Published 2012-04-17 · Updated 2017-12-29 · CVE-2012-0942

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server versions prior to 14.3.x RealNetworks Helix Mobile Server versions prior to 14.3.x

Description The issue is related to a buffer overflow in the rn5auth.dll component, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending crafted authentication credentials.

Recommendations For RealNetworks Helix Server versions prior to 14.3.x, update to version 14.3.x or later to resolve the issue. For RealNetworks Helix Mobile Server versions prior to 14.3.x, update to version 14.3.x or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0942

ZDI-12-094

Affected Products

Helix Mobile Server

Helix Server

References · 5

• http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0942 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-12-094 · Security Note
• http://securitytracker.com/id?1026898 · Note
• http://securityfocus.com/bid/52929 · Note