CVE-2010-1319

Опубликовано: 20 апр. 2010

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Integer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via a request with a crafted payload length.

Ссылки

http://secunia.com/advisories/39279
Vendor Advisory
http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf
Vendor Advisory
http://www.securityfocus.com/bid/39490
http://www.vupen.com/english/advisories/2010/0889
Vendor Advisory
http://secunia.com/advisories/39279
Vendor Advisory
http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf
Vendor Advisory
http://www.securityfocus.com/bid/39490
http://www.vupen.com/english/advisories/2010/0889
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:realnetworks:helix_mobile_server:*:*:*:*:*:*:*:*

Версия до 13.1.1 (включая)

cpe:2.3:a:realnetworks:helix_server:*:*:*:*:*:*:*:*

Версия до 13.1.1 (включая)

cpe:2.3:a:realnetworks:helix_server:11.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:helix_server:11.1:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:helix_server:12.0.1:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:helix_server_mobile:11.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:helix_server_mobile:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:realnetworks:helix_server_mobile:13.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03626

Низкий

10 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

GHSA-g3f2-566v-jfqm

github

почти 4 года назад