Buffer overflow in Realnetworks Helix_mobile_server
CVE-2010-1318
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via…
Vulnerability class: Buffer Overflow
EPSS: 0.776 (99.0th percentile) — read the EPSS interpretation.
Affected products
- Realnetworks Helix_mobile_server
- Realnetworks Helix_server — versions 11.0, 12.0.0, 11.1
- Realnetworks Helix_server_mobile — versions 11.0, 12.0.0, 13.0.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- 39279 (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- 39490 (vdb-entry, x_refsource_BID)
- ADV-2010-0889 (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
Frequently asked questions
- What is CVE-2010-1318?
- CVE-2010-1318 is a vulnerability in Realnetworks Helix_mobile_server, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2010-04-20.
- Is CVE-2010-1318 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.