CVE-2012-1985: CSRF
Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service (stack consumption and daemon crash) via a malformed URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1985?
CVE-2012-1985 is classified as a medium severity vulnerability due to its potential to cause denial of service through authentication hijacking.
How do I fix CVE-2012-1985?
To fix CVE-2012-1985, it is recommended to upgrade RealNetworks Helix Server and Helix Mobile Server to version 14.3.x or later.
What causes the vulnerability identified by CVE-2012-1985?
CVE-2012-1985 is caused by a Cross-Site Request Forgery (CSRF) flaw that allows attackers to hijack admin authentication.
Which versions are affected by CVE-2012-1985?
CVE-2012-1985 affects RealNetworks Helix Server versions 14.0.0, 14.0.1, 14.2, and Helix Mobile Server versions 14.0.0 and 14.0.1.
Can CVE-2012-1985 lead to a denial of service?
Yes, CVE-2012-1985 can lead to denial of service by causing stack consumption and daemon crashes.