Lucene search

K
nvd[email protected]NVD:CVE-2010-1319
HistoryApr 20, 2010 - 3:30 p.m.

CVE-2010-1319

2010-04-2015:30:00
CWE-189
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.523 Medium

EPSS

Percentile

97.6%

Integer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via a request with a crafted payload length.

Affected configurations

NVD
Node
realnetworkshelix_mobile_serverRange13.1.1
OR
realnetworkshelix_serverRange13.1.1
OR
realnetworkshelix_serverMatch11.0
OR
realnetworkshelix_serverMatch11.1
OR
realnetworkshelix_serverMatch12.0.0
OR
realnetworkshelix_serverMatch12.0.1
OR
realnetworkshelix_server_mobileMatch11.0
OR
realnetworkshelix_server_mobileMatch12.0.0
OR
realnetworkshelix_server_mobileMatch13.0.0

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.523 Medium

EPSS

Percentile

97.6%