Unscored severity · published Apr 1, 2011
CVE-2010-4596
Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to…
–
CVSS
5%
EPSS
No
On KEV
Description
Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.0% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HM
Helix Mobile Server · Realnetworks
12.0; 13.1.1; 14.0.0; 14.0.1 · source: NVD
HS
Helix Server · Realnetworks
12.0.0; 12.0.1; 13.0.0; 13.1.1; 14.0.0; 14.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4596
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4596
Vendor Advisory
http://docs.real.com/docs/security/SecurityUpdate033111HS.pdf
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=899
www.securityfocus.com
http://www.securityfocus.com/bid/47109
More from Helix Mobile Server
–
CVE-2012-2268
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled…
–
CVE-2012-2267
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (daemon crash) by…
–
CVE-2012-1985
Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of…
–
CVE-2012-1984
Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allow remote attackers to inject arbitrary web script…
–
CVE-2012-1923
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information…