CVE-2010-1317: Buffer Overflow
First published: Tue Apr 20 2010(Updated: )
Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RealNetworks Helix DNA Server | =12.0 | |
| RealNetworks Helix Server | =11.0 | |
| RealNetworks Helix DNA Server | =11.1.2 | |
| RealNetworks Helix DNA Server | =11.1 | |
| RealNetworks Helix DNA Server | =13.0 | |
| Realnetworks Helix Server Mobile | =12.0.0 | |
| RealNetworks Helix DNA Server | =11.1.3 | |
| Realnetworks Helix Server Mobile | =13.0.0 | |
| RealNetworks Helix Server | =11.1 | |
| RealNetworks Helix Server | =13.0.0 | |
| RealNetworks Helix DNA Server | =11.0 | |
| Realnetworks Helix Server Mobile | =11.0 | |
| RealNetworks Helix Server | =12.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-1317?
CVE-2010-1317 is considered a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2010-1317?
To fix CVE-2010-1317, update to a patched version of RealNetworks Helix Server or Helix Mobile Server provided by the vendor.
What systems are affected by CVE-2010-1317?
CVE-2010-1317 affects RealNetworks Helix Server and Helix Mobile Server versions 11.x, 12.x, and 13.x.
What type of vulnerability is CVE-2010-1317?
CVE-2010-1317 is categorized as a heap-based buffer overflow vulnerability.
What impact can CVE-2010-1317 have on my system?
CVE-2010-1317 can allow remote attackers to compromise the affected systems by executing arbitrary code.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/references
- agent/softwarecombine
- agent/severity
- agent/weakness
- agent/tags
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- vendor/realnetworks
- canonical/realnetworks helix dna server
- version/realnetworks helix dna server/12.0
- canonical/realnetworks helix server
- version/realnetworks helix server/11.0
- version/realnetworks helix dna server/11.1.2
- version/realnetworks helix dna server/11.1
- version/realnetworks helix dna server/13.0
- canonical/realnetworks helix server mobile
- version/realnetworks helix server mobile/12.0.0
- version/realnetworks helix dna server/11.1.3
- version/realnetworks helix server mobile/13.0.0
- version/realnetworks helix server/11.1
- version/realnetworks helix server/13.0.0
- version/realnetworks helix dna server/11.0
- version/realnetworks helix server mobile/11.0
- version/realnetworks helix server/12.0.0