Lucene search
HistoryApr 04, 2011 - 12:27 p.m.
CVE-2010-4235
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
86.0%
Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.
Affected configurations
Node
realnetworkshelix_serverMatch12.0.0
ORrealnetworkshelix_serverMatch12.0.1
ORrealnetworkshelix_serverMatch13.0.0
ORrealnetworkshelix_serverMatch13.1.1
ORrealnetworkshelix_serverMatch14.0.0
ORrealnetworkshelix_serverMatch14.0.1
Node
realnetworkshelix_mobile_serverMatch12.0
ORrealnetworkshelix_mobile_serverMatch13.1.1
ORrealnetworkshelix_mobile_serverMatch14.0.0
ORrealnetworkshelix_mobile_serverMatch14.0.1
Related
cve
cve
CVE-2010-4235
2022-10-03 16:21:06
prion
prion
Format string
2011-04-04 12:27:00
zdi
zdi
cvelist
cvelist
CVE-2010-4235
2022-10-03 16:21:06
seebug
seebug
RealNetworks Helix Server "x-wap-profile"头选项格式串处理漏洞
2011-04-02 00:00:00
openvas
openvas
RealNetworks Helix Server < 14.2 Multiple Vulnerabilities
2011-04-01 00:00:00
RealNetworks Helix Server < 14.2 Multiple Vulnerabilities
2011-04-01 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
86.0%
Related for NVD:CVE-2010-4235