CVE-2004-0389

Опубликовано: 01 июн. 2004

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.

Ссылки

http://secunia.com/advisories/11395
Broken Link
Vendor Advisory
http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities
Broken Link
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10157
Broken Link
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/15880
Third Party Advisory
VDB Entry
http://secunia.com/advisories/11395
Broken Link
Vendor Advisory
http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities
Broken Link
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10157
Broken Link
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/15880
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:realnetworks:helix_universal_server:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:helix_universal_server:9.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08061

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-476

Связанные уязвимости

GHSA-rc8v-wc74-5x2x