Vulnerability Details CVE-2007-4561
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.139
EPSS Ranking 93.9%
CVSS Severity
CVSS v2 Score 10.0
References
- http://labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt
- http://marc.info/?l=full-disclosure&m=118800391412961&w=2
- http://secunia.com/advisories/26609
- http://securityreason.com/securityalert/3069
- http://www.securityfocus.com/bid/25440
- http://www.securitytracker.com/id?1018605
- http://www.vupen.com/english/advisories/2007/2986
- http://labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt
- http://marc.info/?l=full-disclosure&m=118800391412961&w=2
- http://secunia.com/advisories/26609
- http://securityreason.com/securityalert/3069
- http://www.securityfocus.com/bid/25440
- http://www.securitytracker.com/id?1018605
- http://www.vupen.com/english/advisories/2007/2986
Products affected by CVE-2007-4561
-
cpe:2.3:a:realnetworks:helix_dna_server:10.0
-
cpe:2.3:a:realnetworks:helix_dna_server:11.0
-
cpe:2.3:a:realnetworks:helix_dna_server:11.1
-
cpe:2.3:a:realnetworks:helix_dna_server:11.1.2
-
cpe:2.3:a:realnetworks:helix_dna_server:11.1.3