Login Request a demo
Unscored severity · published Dec 19, 2002
CVE-2002-1643
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP…
–
CVSS
74.7%
EPSS
No
On KEV
Description
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
Exploitation
Is it being used?
Exploit prediction (EPSS)74.7% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HU
Helix Universal Server · Realnetworks
9.0; 9.0.2.768 · source: NVD
Affected product
HU
Helix Universal Server
Realnetworks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1643
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1643
Patch
http://www.kb.cert.org/vuls/id/974689
Vendor Advisory
http://www.nextgenss.com/advisories/realhelix.txt
Vendor Advisory
http://www.securityfocus.com/archive/1/304203
Exploit
http://www.securityfocus.com/bid/6454
Patch
http://www.securityfocus.com/bid/6456
Patch
http://www.securityfocus.com/bid/6458
More from Helix Universal Server
7.5
CVE-2004-0389
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as…
–
CVE-2004-0774
RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with…
–
CVE-2004-0049
Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port
–
CVE-2003-0725
Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and…