Unscored severity · published Aug 28, 2007
CVE-2007-4561
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HD
Helix Dna Server · Realnetworks
10.0; 11.0; 11.1; 11.1.2; 11.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4561
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4561
labs.musecurity.com
http://labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt
marc.info
http://marc.info/?l=full-disclosure&m=118800391412961&w=2
secunia.com
http://secunia.com/advisories/26609
securityreason.com
http://securityreason.com/securityalert/3069
Patch
http://www.securityfocus.com/bid/25440
www.securitytracker.com
http://www.securitytracker.com/id?1018605
More from Helix Dna Server
–
CVE-2010-1317
Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an…
–
CVE-2006-6026
Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of…
–
CVE-2006-3276
Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long User-Agent HTTP header in the RTSP…