medium5.0Public exploit code
CVE-2009-2534
RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (daemon crash) via an RTSP SETUP request th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Real Helix DNA - 'RTSP' / 'SETUP' Request Handler2009-07-17 · dos · multiple · Verified
Impact
RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (daemon crash) via an RTSP SETUP request that (1) specifies the / URI or (2) lacks a / character in the URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realnetworks | Helix Server | through 12.0.1 Versions 11.0, 12.0.0 |
| Realnetworks | Helix Server Mobile | through 12.0.0 Version 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf
- http://osvdb.org/55982
- http://www.coresecurity.com/content/real-helix-dna
- http://www.exploit-db.com/exploits/9198
- http://www.securityfocus.com/archive/1/505083/100/0/threaded
- http://www.securityfocus.com/bid/35732
- http://www.vupen.com/english/advisories/2009/1947
- http://docs.real.com/docs/security/SecurityUpdate071409HS.pdf
- http://osvdb.org/55982
- http://www.coresecurity.com/content/real-helix-dna
- http://www.exploit-db.com/exploits/9198
- http://www.securityfocus.com/archive/1/505083/100/0/threaded
- http://www.securityfocus.com/bid/35732
- http://www.vupen.com/english/advisories/2009/1947