Lucene search

[email protected]CVE-2010-4596

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-4596

2022-10-0316:21:05

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-4596

nvd

realnetworks

helix server

helix mobile server

buffer overflow

remote code execution

rtsp request

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.1%

JSON

Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request.

Affected configurations

NVD

Node

realnetworkshelix_serverMatch12.0.0

realnetworkshelix_serverMatch12.0.1

realnetworkshelix_serverMatch13.0.0

realnetworkshelix_serverMatch13.1.1

realnetworkshelix_serverMatch14.0.0

realnetworkshelix_serverMatch14.0.1

Node

realnetworkshelix_mobile_serverMatch12.0

realnetworkshelix_mobile_serverMatch13.1.1

realnetworkshelix_mobile_serverMatch14.0.0

realnetworkshelix_mobile_serverMatch14.0.1

CPENameOperatorVersion
realnetworks:helix_serverrealnetworks helix servereq12.0.0
realnetworks:helix_serverrealnetworks helix servereq12.0.1
realnetworks:helix_serverrealnetworks helix servereq13.0.0
realnetworks:helix_serverrealnetworks helix servereq13.1.1
realnetworks:helix_serverrealnetworks helix servereq14.0.0
realnetworks:helix_serverrealnetworks helix servereq14.0.1

CPE	Name	Operator	Version
realnetworks:helix_server	realnetworks helix server	eq	12.0.0
realnetworks:helix_server	realnetworks helix server	eq	12.0.1
realnetworks:helix_server	realnetworks helix server	eq	13.0.0
realnetworks:helix_server	realnetworks helix server	eq	13.1.1
realnetworks:helix_server	realnetworks helix server	eq	14.0.0
realnetworks:helix_server	realnetworks helix server	eq	14.0.1