CVE-2007-4561

2007-08-2801:17:00

CWE-119

CWE-20

[email protected]

web.nvd.nist.gov

cve-2007-4561

rtsp service

helix dna server

buffer overflow

remote code execution

nvd

security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.429 Medium

EPSS

Percentile

97.4%

JSON

Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.

Affected configurations

NVD

Node

realnetworkshelix_dna_serverMatch10.0

realnetworkshelix_dna_serverMatch11.0

realnetworkshelix_dna_serverMatch11.1

realnetworkshelix_dna_serverMatch11.1.2

realnetworkshelix_dna_serverMatch11.1.3

CPENameOperatorVersion
realnetworks:helix_dna_serverrealnetworks helix dna servereq10.0
realnetworks:helix_dna_serverrealnetworks helix dna servereq11.0
realnetworks:helix_dna_serverrealnetworks helix dna servereq11.1
realnetworks:helix_dna_serverrealnetworks helix dna servereq11.1.2
realnetworks:helix_dna_serverrealnetworks helix dna servereq11.1.3

CPE	Name	Operator	Version
realnetworks:helix_dna_server	realnetworks helix dna server	eq	10.0
realnetworks:helix_dna_server	realnetworks helix dna server	eq	11.0
realnetworks:helix_dna_server	realnetworks helix dna server	eq	11.1
realnetworks:helix_dna_server	realnetworks helix dna server	eq	11.1.2
realnetworks:helix_dna_server	realnetworks helix dna server	eq	11.1.3