CVE-2010-1318: realnetworks helix_mobile_server
Vulnerability summary
CVE-2010-1318 is a high (CVSS 10.0) vulnerability in realnetworks helix_mobile_server. EPSS estimates a 58.05% chance of exploitation in the next 30 days, higher than 99% of scored vulnerabilities. 3 public exploits are recorded.
Weaponized exploit (exploit-database, 11-05-2010)
Source freshness unavailable
How is this decided?Timeline
- 20-04-2010PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
58.05%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
No change 0.00 pp
From 58.05% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
3 foundMultiple Vendor AgentX++ - Stack Buffer Overflow (PoC)
Maturity: poc
AgentX++ Master - AgentX::receive_agentx Stack Buffer Overflow (Metasploit)
Maturity: weaponized
AgentX++ Master AgentX::receive_agentx Stack Buffer Overflow
exploit/windows/misc/agentxpp_receive_agentx
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Realnetworks3 products
- helix_mobile_server≤ 13.1.1
- helix_server≤ 13.1.1 | 11.0 | 11.1 | 12.0.0 | 12.0.1
- helix_server_mobile11.0 | 12.0.0 | 13.0.0
1 vendor · 3 products