NetSight
critical10.0Public exploit code

CVE-2006-6026

Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a DESCRIBE request that contains an invalid LoadTestPassword field.

Affected products

VendorProductAffected versions
RealnetworksHelix Dna Server
Versions 11.0, 11.1
RealnetworksHelix Mobile Server
through 11.1.2
RealnetworksHelix Server
through 11.1.2
Versions 11.0, 11.1

Weakness classification

References