CVE-2010-4235

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header...

RealNetworks Helix Server "x-wap-profile"头选项格式串处理漏洞

BUGTRAQ ID: 47110 CVE ID: CVE-2010-4235 RealNetwork Helix Server是一款支持多格式、跨平台的流媒体服务器软件，能将高质量的多媒体内容发不到任何网络位置。 Helix Server在处理请求中的"x-wap-profile"头选项时存在格式串处理漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码或造成拒绝服务。 Real Networks Helix Mobile Server 14.0.0 Real Networks Helix Mobile Server 13.x Real Networks Helix Mobile...

CVE-2010-4235

CVE-2010-4235 affects RealNetworks Helix Server (12.x, 13.x, 14.x) and Helix Mobile Server (12.x, 13.x, 14.x) prior to 14.2. The vulnerability is a format-string issue in processing the x-wap-profile HTTP header, allowing remote attackers to execute arbitrary code. Public sources describe remote ...