10

CVE-2010-4235

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Realnetworks ≫ Helix Server Version 12.0.0
Realnetworks ≫ Helix Server Version 12.0.1
Realnetworks ≫ Helix Server Version 13.0.0
Realnetworks ≫ Helix Server Version 13.1.1
Realnetworks ≫ Helix Server Version 14.0.0
Realnetworks ≫ Helix Server Version 14.0.1
Realnetworks ≫ Helix Mobile Server Version 13.1.1
Realnetworks ≫ Helix Mobile Server Version 14.0.0
Realnetworks ≫ Helix Mobile Server Version 14.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.15% 0.895
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

http://docs.real.com/docs/security/SecurityUpdate033111HS.pdf
Vendor Advisory
http://www.securityfocus.com/bid/47110