CVE-2002-1643: Buffer Overflow
First published: Thu Dec 19 2002(Updated: )
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RealNetworks Helix Universal Server | =9.0.2.768 | |
| RealNetworks Helix Universal Server | =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/archive/1/304203
- http://www.nextgenss.com/advisories/realhelix.txt
- http://www.service.real.com/help/faq/security/bufferoverrun12192002.html
- http://www.kb.cert.org/vuls/id/974689
- http://www.securityfocus.com/bid/6454
- http://www.securityfocus.com/bid/6456
- http://www.securityfocus.com/bid/6458
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10917
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10916
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10915
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/tags
- agent/description
- agent/event
- agent/source
- vendor/realnetworks
- canonical/realnetworks helix universal server
- version/realnetworks helix universal server/9.0.2.768
- version/realnetworks helix universal server/9.0