CVE-2010-4235

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2011-04-04

Last modified

2024-09-16

Weaknesses

CWE-134

Affected products

• Helix Mobile Server (Realnetworks)
• Helix Server (Realnetworks)

References

• http://docs.real.com/docs/security/SecurityUpdate033111HS.pdf
• http://www.securityfocus.com/bid/47110