CVE-2010-1317

Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2010-04-20

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Helix Dna Server (Realnetworks)
• Helix Server (Realnetworks)
• Helix Server Mobile (Realnetworks)

References

• http://secunia.com/advisories/39279
• http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf
• http://www.securityfocus.com/bid/39490
• http://www.vupen.com/english/advisories/2010/0889