CyberSec.Space Logo
CVEブラウザに戻る

CVE-2007-4561

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0230%
EPSS Percentile17.27th
Published2007年8月28日
Last Modified2026年4月23日

Vulnerability Description

Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.

Affected Platforms (CPE)

📦
Realnetworks

Helix Dna Server

= 10.0
📦
Realnetworks

Helix Dna Server

= 11.0
📦
Realnetworks

Helix Dna Server

= 11.1
📦
Realnetworks

Helix Dna Server

= 11.1.2
📦
Realnetworks

Helix Dna Server

= 11.1.3

References & Advisories

🔗 http://labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt
🔗 http://marc.info/?l=full-disclosure&m=118800391412961&w=2
🔗 http://secunia.com/advisories/26609
🔗 http://securityreason.com/securityalert/3069
🔗 http://www.securityfocus.com/bid/25440
🔗 http://www.securitytracker.com/id?1018605
🔗 http://www.vupen.com/english/advisories/2007/2986
🔗 http://labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt

関連する脆弱性情報

CVE-2006-602610.0

Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1...

CVE-2006-32767.5

Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1...

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVE-2007-182210.0

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailbo...