critical10.0Public exploit code
CVE-2010-1318
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x throug…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AgentX++ Master - AgentX::receive_agentx Stack Buffer Overflow (Metasploit)2010-05-11 · remote · windows · Verified
- Multiple Vendor AgentX++ - Stack Buffer Overflow (PoC)2010-04-17 · dos · windows
Impact
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Realnetworks | Helix Mobile Server | through 13.1.1 |
| Realnetworks | Helix Server | through 13.1.1 Versions 11.0, 11.1, 12.0.0, 12.0.1 |
| Realnetworks | Helix Server Mobile | Versions 11.0, 12.0.0, 13.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/39279
- http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf
- http://www.securityfocus.com/bid/39490
- http://www.vupen.com/english/advisories/2010/0889
- http://secunia.com/advisories/39279
- http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf
- http://www.securityfocus.com/bid/39490
- http://www.vupen.com/english/advisories/2010/0889