Lucene search

[email protected]CVE-2010-1317

HistoryOct 03, 2022 - 4:20 p.m.

CVE-2010-1317

2022-10-0316:20:59

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-1317

buffer overflow

realnetworks

helix server

helix mobile server

nvd

ntlm authentication

remote attackers

base64-encoded data

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.659 Medium

EPSS

Percentile

97.9%

JSON

Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data.

Affected configurations

NVD

Node

realnetworkshelix_dna_serverMatch11.0

realnetworkshelix_dna_serverMatch11.1

realnetworkshelix_dna_serverMatch11.1.2

realnetworkshelix_dna_serverMatch11.1.3

realnetworkshelix_dna_serverMatch12.0

realnetworkshelix_dna_serverMatch13.0

realnetworkshelix_serverMatch11.0

realnetworkshelix_serverMatch11.1

realnetworkshelix_serverMatch12.0.0

realnetworkshelix_serverMatch13.0.0

realnetworkshelix_server_mobileMatch11.0

realnetworkshelix_server_mobileMatch12.0.0

realnetworkshelix_server_mobileMatch13.0.0

CPENameOperatorVersion
realnetworks:helix_dna_serverrealnetworks helix dna servereq11.0
realnetworks:helix_dna_serverrealnetworks helix dna servereq11.1
realnetworks:helix_dna_serverrealnetworks helix dna servereq11.1.2
realnetworks:helix_dna_serverrealnetworks helix dna servereq11.1.3
realnetworks:helix_dna_serverrealnetworks helix dna servereq12.0
realnetworks:helix_dna_serverrealnetworks helix dna servereq13.0
realnetworks:helix_serverrealnetworks helix servereq11.0
realnetworks:helix_serverrealnetworks helix servereq11.1
realnetworks:helix_serverrealnetworks helix servereq12.0.0
realnetworks:helix_serverrealnetworks helix servereq13.0.0

CPE	Name	Operator	Version
realnetworks:helix_dna_server	realnetworks helix dna server	eq	11.0
realnetworks:helix_dna_server	realnetworks helix dna server	eq	11.1
realnetworks:helix_dna_server	realnetworks helix dna server	eq	11.1.2
realnetworks:helix_dna_server	realnetworks helix dna server	eq	11.1.3
realnetworks:helix_dna_server	realnetworks helix dna server	eq	12.0
realnetworks:helix_dna_server	realnetworks helix dna server	eq	13.0
realnetworks:helix_server	realnetworks helix server	eq	11.0
realnetworks:helix_server	realnetworks helix server	eq	11.1
realnetworks:helix_server	realnetworks helix server	eq	12.0.0
realnetworks:helix_server	realnetworks helix server	eq	13.0.0