CVE-2010-1318
RealNetworks Helix Server < 13.1.1 - Remote Code Execution via Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-1318.
PoCs published by Metasploit, ZSploit.com, jduck, including Metasploit module exploits/windows/misc/agentxpp_receive_agentx.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in AgentX++ (CVE-2010-1318) by sending a crafted request to trigger arbitrary code execution, potentially with SYSTEM privileges. It leverages a Metasploit module to exploit Helix Server v12/v13's master.exe service.
Description
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via unspecified vectors.
Exploits (3)
This exploit targets a stack buffer overflow in AgentX++ (CVE-2010-1318) by sending a crafted request to trigger arbitrary code execution, potentially with SYSTEM privileges. It leverages a Metasploit module to exploit Helix Server v12/v13's master.exe service.
This exploit targets a stack buffer overflow in Multiple Vendor AgentX++ by sending two malformed packets to overwrite the stack buffer. The PoC demonstrates a denial-of-service condition by triggering an access violation.
This Metasploit module exploits a stack buffer overflow in the AgentX++ library (CVE-2010-1318) by sending a crafted AgentX request to trigger arbitrary code execution. It targets master.exe in Real Network's Helix Server v12/v13, leveraging a JMP ESP instruction in msvcp71.dll for payload execution.