CVE-2004-0389: Null Pointer Dereference

Published Apr 17, 2004

Updated

RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GETPARAMETER or (2) DESCRIBE requests.

Affected Software

2 affected components

RealNetworks Helix Universal Server=9.0.1

RealNetworks Helix Universal Server=9.0.2

Remediation

Patch Available

http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities

Event History

Apr 17, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0389?

CVE-2004-0389 is considered a critical vulnerability due to its ability to cause a denial of service by crashing the server.

How do I fix CVE-2004-0389?

To fix CVE-2004-0389, upgrade RealNetworks Helix Universal Server to version 9.0.3 or later.

What versions of Helix Universal Server are affected by CVE-2004-0389?

CVE-2004-0389 affects RealNetworks Helix Universal Server versions 9.0.1 and 9.0.2.

What type of attack does CVE-2004-0389 allow?

CVE-2004-0389 allows remote attackers to perform denial of service attacks by sending malformed GET_PARAMETER or DESCRIBE requests.

Is CVE-2004-0389 related to remote code execution?

No, CVE-2004-0389 specifically leads to a denial of service and does not allow for remote code execution.