Description
Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service (stack consumption and daemon crash) via a malformed URL.
References
- 52929 vdb-entry
- helix-server-url-dos(74678) vdb-entry
- 1026898 vdb-entry
- http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf