CVE-2012-1923: Undefined Security Weakness

RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under admbdb\users, which allows local users to obtain sensitive information by reading a database...

PT-2012-3908

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server and Helix Mobile Server versions 14.x before 14.3.x Description The issue is related to the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server, where a crafted Open-PDU request can cause a denial o...

PT-2012-3655

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server and Helix Mobile Server versions 14.x before 14.3.x Description The issue allows local users to obtain sensitive information by reading a database, as passwords are stored in cleartext under adm b dbusers...

CVE-2012-2268: Improper Input Validation

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different...

PT-2012-2965

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server versions prior to 14.3.x RealNetworks Helix Mobile Server versions prior to 14.3.x Description The issue is related to a buffer overflow in the rn5auth.dll component, which can be exploited by remote attackers to...

PT-2012-3907

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server and Helix Mobile Server versions 14.x before 14.3.x Description The issue allows remote attackers to cause a denial of service by establishing and closing a TCP connection on port 705, resulting in a daemon crash...

CVE-2012-2267: Undefined Security Weakness

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service daemon crash by establishing and closing a port-705 TCP connection, a different vulnerability than CVE-2012-1923...

CVE-2010-4235: Use of Externally-Controlled Format String

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header...

PT-2011-1483

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server versions 12.x through 14.1 RealNetworks Helix Mobile Server versions 12.x through 14.1 Description The issue allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header. This...

PT-2011-1611

Name of the Vulnerable Software and Affected Versions RealNetworks Helix Server versions 12.x through 14.1 RealNetworks Helix Mobile Server versions 12.x through 14.1 Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a long string in an RTSP...

CVE-2010-1318: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the AgentX::receiveagentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via unspecified vectors...