CVE-2009-2534

2009-07-2017:30:57

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.882

Percentile

98.7%

JSON

RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (daemon crash) via an RTSP SETUP request that (1) specifies the / URI or (2) lacks a / character in the URI.

Affected configurations

Nvd

Node

realnetworkshelix_serverRange≤12.0.1

realnetworkshelix_serverMatch11.0

realnetworkshelix_serverMatch12.0.0

realnetworkshelix_server_mobileRange≤12.0.0

realnetworkshelix_server_mobileMatch11.0

VendorProductVersionCPE
realnetworkshelix_server*cpe:2.3:a:realnetworks:helix_server:*:*:*:*:*:*:*:*
realnetworkshelix_server11.0cpe:2.3:a:realnetworks:helix_server:11.0:*:*:*:*:*:*:*
realnetworkshelix_server12.0.0cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*
realnetworkshelix_server_mobile*cpe:2.3:a:realnetworks:helix_server_mobile:*:*:*:*:*:*:*:*
realnetworkshelix_server_mobile11.0cpe:2.3:a:realnetworks:helix_server_mobile:11.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realnetworks	helix_server	*	cpe:2.3:a:realnetworks:helix_server::::::::
realnetworks	helix_server	11.0	cpe:2.3:a:realnetworks:helix_server:11.0:::::::*
realnetworks	helix_server	12.0.0	cpe:2.3:a:realnetworks:helix_server:12.0.0:::::::*
realnetworks	helix_server_mobile	*	cpe:2.3:a:realnetworks:helix_server_mobile::::::::
realnetworks	helix_server_mobile	11.0	cpe:2.3:a:realnetworks:helix_server_mobile:11.0:::::::*