10
CVE-2010-4235
- EPSS 4.35%
- Published 04.04.2011 12:27:36
- Last modified 11.04.2025 00:51:21
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.
Data is provided by the National Vulnerability Database (NVD)
Realnetworks ≫ Helix Server Version12.0.0
Realnetworks ≫ Helix Server Version12.0.1
Realnetworks ≫ Helix Server Version13.0.0
Realnetworks ≫ Helix Server Version13.1.1
Realnetworks ≫ Helix Server Version14.0.0
Realnetworks ≫ Helix Server Version14.0.1
Realnetworks ≫ Helix Mobile Server Version12.0
Realnetworks ≫ Helix Mobile Server Version13.1.1
Realnetworks ≫ Helix Mobile Server Version14.0.0
Realnetworks ≫ Helix Mobile Server Version14.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.35% | 0.885 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-134 Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.