Description
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
References (7)
Core 7
Core References
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/25440
Mailing List mailing-list
x_refsource_fulldisc
http://marc.info/?l=full-disclosure&m=118800391412961&w=2
Various Sources x_refsource_misc
http://labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2986
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/26609
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1018605
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/3069
Scores
EPSS
0.1669
EPSS Percentile
95.0%
Details
CWE
CWE-119
CWE-20
Status
published
Products (5)
realnetworks/helix_dna_server
10.0
realnetworks/helix_dna_server
11.0
realnetworks/helix_dna_server
11.1
realnetworks/helix_dna_server
11.1.2
realnetworks/helix_dna_server
11.1.3
Published
Aug 28, 2007
Tracked Since
Feb 18, 2026