Title: RealNetworks Helix Server Multiple Remote Code Execution Vulnerabilities
Severity: CRITICAL
Description:
RealNetworks Helix Server is a multiformat, cross-platform streaming server.
The server is prone to multiple buffer-overflow vulnerabilities that can allow attackers to execute remote code:
1. A heap-overflow issue arises when the application handles excessive data through a Real Time Streaming Protocol (RTSP) 'DESCRIBE' request. This issue can allow unauthenticated remote attackers to execute arbitrary code on a vulnerable computer in the context of the affected server.
2. A stack-based buffer-overflow issue arises when the application handles excessive data through three Real Time Streaming Protocol (RTSP) 'SETUP' requests over TCP port 554. This issue can allow remote attackers to execute arbitrary code on a vulnerable computer in the context of the affected server.
3. A heap-overflow issue arises when the application handles excessive data through the 'DataConvertBuffer' property. This issue can allow unauthenticated remote attackers to execute arbitrary code on a vulnerable computer in the context of the affected server.
4. A heap-overflow issue arises when the application handles excessive Base64 NTLM authentication data. This issue can allow unauthenticated remote attackers to execute arbitrary code on a vulnerable computer in the context of the affected server.
Exploiting these issues may allow attackers to gain unauthorized access to affected computers. Failed attempts may cause crashes and deny service to legitimate users of the application.
These issues affect versions prior to Helix Server and Helix Mobile Server 11.1.8 and 12.0.1.
Affected Products:
- Real Networks Helix Mobile Server 11.1.2
- Real Networks Helix Mobile Server 11.1.4
- Real Networks Helix Mobile Server 11.1.6
- Real Networks Helix Mobile Server 11.1.7
- Real Networks Helix Mobile Server 12.0.0
- Real Networks Helix Server 11.1.2
- Real Networks Helix Server 11.1.4
- Real Networks Helix Server 11.1.6
- Real Networks Helix Server 11.1.7
- Real Networks Helix Server 12.0.0
References:
- Real Networks: Real Networks Helix Server Homepage
- Real Networks: SecurityUpdate121508HS
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
