CVE-2006-6026

🗓️ 21 Nov 2006 23:00:00Reported by mitreType

Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a DESCRIBE request that contains an invalid LoadTestPassword field

Reporter	Title	Published	Views	Family All 5
Tenable Nessus	Helix Server < 11.1.3.1887 DESCRIBE Request LoadTestPassword Field Overflow	23 Mar 200700:00	–	nessus
Tenable Nessus	RealNetworks Helix Servers DESCRIBE Request LoadTestPassword Field Remote Overflow	23 Mar 200700:00	–	nessus
Check Point Advisories	RealNetworks Helix Server DESCRIBE Request Buffer Overflow (CVE-2006-6026)	27 Dec 200900:00	–	checkpoint_advisories
Cvelist	CVE-2006-6026	21 Nov 200623:00	–	cvelist
NVD	CVE-2006-6026	21 Nov 200623:07	–	nvd

NVD

Node

realnetworks helix_dna_serverMatch11.0

realnetworks helix_dna_serverMatch11.1

realnetworks helix_mobile_serverRange≤11.1.2

realnetworks helix_serverRange≤11.1.2

realnetworks helix_serverMatch11.0

realnetworks helix_serverMatch11.1

Source	Link
attrition	www.attrition.org/pipermail/vim/2007-March/001459.html
vupen	www.vupen.com/english/advisories/2007/1056
docs	www.docs.real.com/docs/security/SecurityUpdate032107Server.pdf
attrition	www.attrition.org/pipermail/vim/2007-March/001468.html
securityfocus	www.securityfocus.com/bid/23068
lists	www.lists.helixcommunity.org/pipermail/server-cvs/2007-January/003783.html
securityfocus	www.securityfocus.com/bid/21141
web	www.web.archive.org/web/20060502082622/www.gleg.net/vulndisco_pack_professional.shtml
exploit-db	www.exploit-db.com/exploits/3531
securityfocus	www.securityfocus.com/archive/1/463333/100/0/threaded

23 Apr 2026 00:35Current

8.1High risk

Vulners AI Score8.1

CVSS 210

EPSS0.30408

CWE-119