Описание
Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_server:12.0.1:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_server:13.0.0:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_server:13.1.1:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_server:14.0.0:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_server:14.0.1:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:realnetworks:helix_mobile_server:12.0:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_mobile_server:13.1.1:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_mobile_server:14.0.0:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:helix_mobile_server:14.0.1:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.05834
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-119
Связанные уязвимости
github
больше 3 лет назад
Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request.
EPSS
Процентиль: 90%
0.05834
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-119