realnetworks helix server vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x up to and including 13.x and other products, allows remote malicious users to execute arbitrary code via unspecified vectors.

Realnetworks Helix Server 11.0 Realnetworks Helix Server Realnetworks Helix Mobile Server Realnetworks Helix Server Mobile 11.0 Realnetworks Helix Server Mobile 13.0.0 Realnetworks Helix Server 12.0.0 Realnetworks Helix Server Mobile 12.0.0 Realnetworks Helix Server 12.0.1 Realnetworks Helix Server 11.1

2 EDB exploits

10

CVSSv2

Integer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x up to and including 13.x and other products, allows remote malicious users to execute arbitrary code via a request with a crafted payload ...

Realnetworks Helix Server Mobile 12.0.0 Realnetworks Helix Mobile Server Realnetworks Helix Server 12.0.1 Realnetworks Helix Server 12.0.0 Realnetworks Helix Server 11.1 Realnetworks Helix Server 11.0 Realnetworks Helix Server Mobile 11.0 Realnetworks Helix Server Mobile 13.0.0 Realnetworks Helix Server

7.5

CVSSv2

Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote malicious users to have an unspecified impact via invalid base64-encoded data.

Realnetworks Helix Server 12.0.0 Realnetworks Helix Dna Server 11.0 Realnetworks Helix Dna Server 13.0 Realnetworks Helix Dna Server 11.1.2 Realnetworks Helix Dna Server 11.1.3 Realnetworks Helix Server Mobile 11.0 Realnetworks Helix Server Mobile 12.0.0 Realnetworks Helix Server Mobile 13.0.0 Realnetworks Helix Server 11.0 Realnetworks Helix Server 11.1 Realnetworks Helix Server 13.0.0 Realnetworks Helix Dna Server 12.0 Realnetworks Helix Dna Server 11.1

9.3

CVSSv2

Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x prior to 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x prior to 14.2, allows remote malicious users to execute arbitrary code via a long string in an RTSP request.

Realnetworks Helix Server 12.0.0 Realnetworks Helix Server 13.0.0 Realnetworks Helix Server 13.1.1 Realnetworks Helix Server 14.0.0 Realnetworks Helix Server 14.0.1 Realnetworks Helix Server 12.0.1 Realnetworks Helix Mobile Server 14.0.1 Realnetworks Helix Mobile Server 13.1.1 Realnetworks Helix Mobile Server 14.0.0 Realnetworks Helix Mobile Server 12.0

10

CVSSv2

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x prior to 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x prior to 14.2, allows remote malicious users to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

Realnetworks Helix Server 14.0.1 Realnetworks Helix Server 12.0.0 Realnetworks Helix Server 12.0.1 Realnetworks Helix Server 13.0.0 Realnetworks Helix Server 13.1.1 Realnetworks Helix Server 14.0.0 Realnetworks Helix Mobile Server 14.0.0 Realnetworks Helix Mobile Server 14.0.1 Realnetworks Helix Mobile Server 12.0 Realnetworks Helix Mobile Server 13.1.1

10

CVSSv2

Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server prior to 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote malicious users to cause a denial of service (application crash) or execute arbitrary code via a DESCRIBE request that contains an i...

Realnetworks Helix Mobile Server Realnetworks Helix Server 11.1 Realnetworks Helix Server Realnetworks Helix Dna Server 11.0 Realnetworks Helix Dna Server 11.1 Realnetworks Helix Server 11.0

1 EDB exploit

5

CVSSv2

RealNetworks Helix Server and Helix Mobile Server prior to 13.0.0 allow remote malicious users to cause a denial of service (daemon crash) via an RTSP SETUP request that (1) specifies the / URI or (2) lacks a / character in the URI.

Realnetworks Helix Server Realnetworks Helix Server 12.0.0 Realnetworks Helix Server Mobile 11.0 Realnetworks Helix Server 11.0 Realnetworks Helix Server Mobile

1 EDB exploit

2.1

CVSSv2

RealNetworks Helix Server and Helix Mobile Server 14.x prior to 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information by reading a database.

Realnetworks Helix Server 14.0.1 Realnetworks Helix Server 14.2.0.212 Realnetworks Helix Server 14.2 Realnetworks Helix Server 14.0.0 Realnetworks Helix Mobile Server 14.0.0 Realnetworks Helix Mobile Server 14.0.1

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x prior to 14.3.x allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Realnetworks Helix Server 14.0.1 Realnetworks Helix Server 14.2 Realnetworks Helix Server 14.2.0.212 Realnetworks Helix Server 14.0.0 Realnetworks Helix Mobile Server 14.0.0 Realnetworks Helix Mobile Server 14.0.1

5

CVSSv2

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x prior to 14.3.x allows remote malicious users to cause a denial of service (daemon crash) by establishing and closing a port-705 TCP connection, a different vulnerability than CVE-2012-1...

Realnetworks Helix Server 14.2.0.212 Realnetworks Helix Server 14.2 Realnetworks Helix Server 14.0.0 Realnetworks Helix Server 14.0.1 Realnetworks Helix Mobile Server 14.0.0 Realnetworks Helix Mobile Server 14.0.1

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook