Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2534. PoCs published by Core Security.
AI-analyzed exploit summary The exploit demonstrates two DoS vulnerabilities in Real Helix DNA Server (CVE-2009-2533 and CVE-2009-2534) by sending malformed RTSP requests. The first PoC sends multiple SET_PARAMETER requests with an empty DataConvertBuffer, while the second sends a malformed SETUP request missing the 0x2F character.
Description
RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (daemon crash) via an RTSP SETUP request that (1) specifies the / URI or (2) lacks a / character in the URI.
Exploits (1)
The exploit demonstrates two DoS vulnerabilities in Real Helix DNA Server (CVE-2009-2533 and CVE-2009-2534) by sending malformed RTSP requests. The first PoC sends multiple SET_PARAMETER requests with an empty DataConvertBuffer, while the second sends a malformed SETUP request missing the 0x2F character.