Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-5911
HistoryJan 20, 2009 - 4:00 p.m.

CVE-2008-5911

2009-01-2016:00:00
CWE-119
mitre
web.nvd.nist.gov
28
cve-2008-5911
buffer overflow
realnetworks
helix server
helix mobile server
denial of service
remote code execution
rtsp
ntlm
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.542

Percentile

97.6%

JSON

Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request.

Affected configurations

Nvd
Node
realnetworkshelix_serverMatch11.0
OR
realnetworkshelix_serverMatch12.0.0
OR
realnetworkshelix_server_mobileMatch11.0
OR
realnetworkshelix_server_mobileMatch12.0.0
VendorProductVersionCPE
realnetworkshelix_server11.0cpe:2.3:a:realnetworks:helix_server:11.0:*:*:*:*:*:*:*
realnetworkshelix_server12.0.0cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*
realnetworkshelix_server_mobile11.0cpe:2.3:a:realnetworks:helix_server_mobile:11.0:*:*:*:*:*:*:*
realnetworkshelix_server_mobile12.0.0cpe:2.3:a:realnetworks:helix_server_mobile:12.0.0:*:*:*:*:*:*:*

Related

checkpoint_advisories 2
saint 4
nessus 1
prion 1
cvelist 1
nvd 1
checkpoint_advisories
checkpoint_advisories
RealNetworks Helix Server RTSP SETUP Stack Buffer Overflow (CVE-2008-5911)
2009-10-13 00:00:00
RealNetworks Helix Server RTSP DESCRIBE Heap Buffer Overflow (CVE-2008-5911)
2010-02-15 00:00:00
saint
saint
RealNetworks Helix Server RTSP Proxy-Require heap overflow
2008-03-18 00:00:00
RealNetworks Helix Server RTSP Proxy-Require heap overflow
2008-03-18 00:00:00
RealNetworks Helix Server RTSP Proxy-Require heap overflow
2008-03-18 00:00:00
nessus
nessus
RealNetworks Helix Server < 11.1.8/12.0.1 Multiple Vulnerabilities
2009-01-30 00:00:00
prion
prion
Buffer overflow
2009-01-20 16:00:00
cvelist
cvelist
CVE-2008-5911
2009-01-20 15:26:00
nvd
nvd
CVE-2008-5911
2009-01-20 16:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.542

Percentile

97.6%

JSON
Related for CVE-2008-5911
checkpoint_advisories2saint4nessus1prion1cvelist1nvd1