Lucene search

K
cveMitreCVE-2010-1319
HistoryApr 20, 2010 - 3:30 p.m.

CVE-2010-1319

2010-04-2015:30:00
CWE-189
mitre
web.nvd.nist.gov
29
cve-2010-1319
integer overflow
agentx
realnetworks helix server
remote code execution
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.784

Percentile

98.3%

Integer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via a request with a crafted payload length.

Affected configurations

Nvd
Node
realnetworkshelix_mobile_serverRange13.1.1
OR
realnetworkshelix_serverRange13.1.1
OR
realnetworkshelix_serverMatch11.0
OR
realnetworkshelix_serverMatch11.1
OR
realnetworkshelix_serverMatch12.0.0
OR
realnetworkshelix_serverMatch12.0.1
OR
realnetworkshelix_server_mobileMatch11.0
OR
realnetworkshelix_server_mobileMatch12.0.0
OR
realnetworkshelix_server_mobileMatch13.0.0
VendorProductVersionCPE
realnetworkshelix_mobile_server*cpe:2.3:a:realnetworks:helix_mobile_server:*:*:*:*:*:*:*:*
realnetworkshelix_server*cpe:2.3:a:realnetworks:helix_server:*:*:*:*:*:*:*:*
realnetworkshelix_server11.0cpe:2.3:a:realnetworks:helix_server:11.0:*:*:*:*:*:*:*
realnetworkshelix_server11.1cpe:2.3:a:realnetworks:helix_server:11.1:*:*:*:*:*:*:*
realnetworkshelix_server12.0.0cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*
realnetworkshelix_server12.0.1cpe:2.3:a:realnetworks:helix_server:12.0.1:*:*:*:*:*:*:*
realnetworkshelix_server_mobile11.0cpe:2.3:a:realnetworks:helix_server_mobile:11.0:*:*:*:*:*:*:*
realnetworkshelix_server_mobile12.0.0cpe:2.3:a:realnetworks:helix_server_mobile:12.0.0:*:*:*:*:*:*:*
realnetworkshelix_server_mobile13.0.0cpe:2.3:a:realnetworks:helix_server_mobile:13.0.0:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.784

Percentile

98.3%