Description
Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long User-Agent HTTP header in the RTSP service and (2) unspecified vectors involving the "parsing of HTTP URL schemes".
References
- helix-dna-rtsp-bo(27316) vdb-entry
- 18606 vdb-entry
- 1016365 vdb-entry
- ADV-2006-2521 vdb-entry
- 20060622 [MU-200606-01] Real Helix RTSP Server Heap Corruption Vulnerabilities mailing-list
- helix-dna-url-bo(27317) vdb-entry
- 26799 vdb-entry
- 20784 third-party-advisory
- http://labs.musecurity.com/advisories/MU-200606-01.txt