Vulnerabilities for Helix universal server (...) - CXSECURITY.COM

Vulnerabilities for 'Helix universal server'

2004-11-03

CVE-2004-0774

RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.

2004-06-01

CVE-2004-0389

RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.

2004-02-17

CVE-2004-0049

Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.

2003-10-20

CVE-2003-0725

Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.

2002-12-19

CVE-2002-1643

CWE-Other

Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.

>>> Vendor: Realnetworks 26 Products

Realsystem g2 server

Realplayer intranet

Realjukebox 2 plus

Helix universal server

Realone enterprise desktop

Realone desktop manager

Realsystem proxy

Realsystem server

Helix universal mobile server

Helix universal mobile server and gateway

Helix dna server

Helix mobile server

Realplayer enterprise

Helix server mobile

Realarcade installer

Copyright 2024, cxsecurity.com