Unscored severity · published Apr 17, 2012
CVE-2012-0942
Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication…
–
CVSS
4.1%
EPSS
No
On KEV
Description
Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication credentials.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.1% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HM
Helix Mobile Server · Realnetworks
14.0.0; 14.0.1 · source: NVD
HS
Helix Server · Realnetworks
14.0.0; 14.0.1; 14.2; 14.2.0.212 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0942
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0942
Vendor Advisory
http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf
www.securityfocus.com
http://www.securityfocus.com/bid/52929
www.securitytracker.com
http://www.securitytracker.com/id?1026898
More from Helix Mobile Server
–
CVE-2012-2268
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled…
–
CVE-2012-2267
master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (daemon crash) by…
–
CVE-2012-1985
Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of…
–
CVE-2012-1984
Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allow remote attackers to inject arbitrary web script…
–
CVE-2012-1923
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information…