Realnetworks Helix Universal Server vulnerabilities

5 vulnerabilities

Known vulnerabilities in Realnetworks Helix Universal Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2002-1643realnetworks · helix_universal_serverrealnetworks helix_universal_serverMultiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.CVSS7.5HighEPSS74.70%RoutineCVE-2004-0774realnetworks · helix_universal_mobile_server_and_gateway +1 morerealnetworks helix_universal_mobile_server_and_gatewayRealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.CVSS7.8HighEPSS1.92%RoutineCVE-2004-0049realnetworks · helix_universal_mobile_server +1 morerealnetworks helix_universal_mobile_serverHelix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.CVSS6.8MediumEPSS1.47%PrioritiseCVE-2004-0389realnetworks · helix_universal_serverrealnetworks helix_universal_serverRealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.CVSS7.8HighEPSS54.92%PrioritiseCVE-2003-0725realnetworks · helix_universal_server +1 morerealnetworks helix_universal_serverBuffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.CVSS7.5HighEPSS48.57%