Unscored severity · published Apr 20, 2010
CVE-2010-1318
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other…
–
CVSS
58.1%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)58.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HM
Helix Mobile Server · Realnetworks
through 13.1.1 · source: NVD
HS
Helix Server · Realnetworks
through 13.1.1; 11.0; 11.1; 12.0.0; 12.0.1 · source: NVD
HS
Helix Server Mobile · Realnetworks
11.0; 12.0.0; 13.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1318
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1318
Vendor Advisory
http://secunia.com/advisories/39279
www.realnetworks.com
http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf
www.securityfocus.com
http://www.securityfocus.com/bid/39490
Vendor Advisory
http://www.vupen.com/english/advisories/2010/0889
More from Helix Mobile Server
–
CVE-2012-2268
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled…
–
CVE-2012-2267
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (daemon crash) by…
–
CVE-2012-1985
Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of…
–
CVE-2012-1984
Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allow remote attackers to inject arbitrary web script…
–
CVE-2012-1923
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information…