CVE-2009-2533

2009-07-2017:30:54

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.882

Percentile

98.7%

JSON

rmserver in RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allows remote attackers to cause a denial of service (daemon exit) via multiple RTSP SET_PARAMETER requests with empty DataConvertBuffer headers.

Affected configurations

Nvd

Node

realnetworkshelix_serverRange≤12.0.1

realnetworkshelix_serverMatch12.0.0

realnetworkshelix_server_mobileRange≤12.0.0

realnetworkshelix_server_mobileMatch11.0

VendorProductVersionCPE
realnetworkshelix_server*cpe:2.3:a:realnetworks:helix_server:*:*:*:*:*:*:*:*
realnetworkshelix_server12.0.0cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*
realnetworkshelix_server_mobile*cpe:2.3:a:realnetworks:helix_server_mobile:*:*:*:*:*:*:*:*
realnetworkshelix_server_mobile11.0cpe:2.3:a:realnetworks:helix_server_mobile:11.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realnetworks	helix_server	*	cpe:2.3:a:realnetworks:helix_server::::::::
realnetworks	helix_server	12.0.0	cpe:2.3:a:realnetworks:helix_server:12.0.0:::::::*
realnetworks	helix_server_mobile	*	cpe:2.3:a:realnetworks:helix_server_mobile::::::::
realnetworks	helix_server_mobile	11.0	cpe:2.3:a:realnetworks:helix_server_mobile:11.0:::::::*