Login Request a demo
Unscored severity · published Nov 21, 2006
CVE-2006-6026
Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of…
–
CVSS
11.3%
EPSS
No
On KEV
Description
Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a DESCRIBE request that contains an invalid LoadTestPassword field.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HD
Helix Dna Server · Realnetworks
11.0; 11.1 · source: NVD
HM
Helix Mobile Server · Realnetworks
through 11.1.2 · source: NVD
HS
Helix Server · Realnetworks
through 11.1.2; 11.0; 11.1 · source: NVD
Affected product
HD
Helix Dna Server
Realnetworks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6026
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6026
docs.real.com
http://docs.real.com/docs/security/SecurityUpdate032107Server.pdf
gleg.net
http://gleg.net/helix.txt
lists.helixcommunity.org
http://lists.helixcommunity.org/pipermail/server-cvs/2007-January/003783.html
Vendor Advisory
http://secunia.com/advisories/22944
web.archive.org
http://web.archive.org/web/20060502082622/www.gleg.net/vulndisco_pack_professional.shtml
www.attrition.org
http://www.attrition.org/pipermail/vim/2007-March/001459.html
More from Helix Dna Server
–
CVE-2010-1317
Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an…
–
CVE-2007-4561
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require…
–
CVE-2006-3276
Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long User-Agent HTTP header in the RTSP…