Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-4235

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

Published

2011-04-04T12:27:36.327

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-134
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application realnetworks helix_server 12.0.0 Yes
Application realnetworks helix_server 12.0.1 Yes
Application realnetworks helix_server 13.0.0 Yes
Application realnetworks helix_server 13.1.1 Yes
Application realnetworks helix_server 14.0.0 Yes
Application realnetworks helix_server 14.0.1 Yes
Application realnetworks helix_mobile_server 12.0 Yes
Application realnetworks helix_mobile_server 13.1.1 Yes
Application realnetworks helix_mobile_server 14.0.0 Yes
Application realnetworks helix_mobile_server 14.0.1 Yes
References