Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2010-0416

Published: 18/02/2010 Updated: 19/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Realplayer

Vulnerability Summary

Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a URL argument containing a % (percent) character that is not followed by two hex digits.

Vulnerable Product Search on Vulmon Subscribe to Product

realnetworks realplayer

realnetworks helix player 1.0.6

Vendor Advisories

Red Hat: Critical: HelixPlayer security update
Synopsis Critical: HelixPlayer security update Type/Severity Security Advisory: Critical Topic An updated HelixPlayer package that fixes several security issues is nowavailable for Red Hat Enterprise Linux 4This update has been rated as having critical security impact by the RedHat Security Response Team ...

Exploits

Exploit DB: Helix Player 11.0.2 - Encoded URI Processing Buffer Overflow
source: wwwsecurityfocuscom/bid/38161/info Helix Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input Successful exploits may allow remote attackers to execute arbitrary code in the context of the application Failed exploit attempts will cause denial-of-service c ...

References

CWE-119https://bugzilla.redhat.com/show_bug.cgi?id=561856http://lists.helixcommunity.org/pipermail/common-cvs/2007-July/014956.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0094.htmlhttps://helixcommunity.org/viewcvs/common/util/hxurl.cpp?view=log#rev1.24.4.1.4.1http://secunia.com/advisories/38450https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10847https://access.redhat.com/errata/RHSA-2010:0094https://nvd.nist.govhttps://www.exploit-db.com/exploits/33620/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120CVE-2024-35921CVE-2024-35874brute forceCVE-2024-36080unprivilegedCVE-2024-35917IDORCVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook