CVE-2008-5911

RealNetworks Helix Server <11.1.8-12.0.1 - Buffer Overflow

Title source: llm
STIX 2.1

Description

Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request.

References (7)

Core 7
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33360
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1021500
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1021498
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/3521
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1021501
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1021499

Scores

EPSS 0.1643
EPSS Percentile 95.0%

Details

CWE
CWE-119
Status published
Products (4)
realnetworks/helix_server 11.0
realnetworks/helix_server 12.0.0
realnetworks/helix_server_mobile 11.0
realnetworks/helix_server_mobile 12.0.0
Published Jan 20, 2009
Tracked Since Feb 18, 2026