• info
• discussion
• exploit
• solution
• references

RealNetworks Helix DNA Server RTSP Command Remote Heap Buffer Overflow Vulnerability

RealNetworks Helix DNA Server is prone to a heap-based buffer-overflow vulnerability because it fails to perform sufficient boundary checks on user-supplied data before copying it to an insufficiently sized memory buffer.

An attacker could leverage this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

This issue affects versions prior to Helix Server 11.1.4.