CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-4235

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.043

EPSS Ranking 88.3%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2010-4235

Realnetworks » Helix Mobile Server » Version: 12.0

cpe:2.3:a:realnetworks:helix_mobile_server:12.0
Realnetworks » Helix Mobile Server » Version: 13.1.1

cpe:2.3:a:realnetworks:helix_mobile_server:13.1.1
Realnetworks » Helix Mobile Server » Version: 14.0.0

cpe:2.3:a:realnetworks:helix_mobile_server:14.0.0
Realnetworks » Helix Mobile Server » Version: 14.0.1

cpe:2.3:a:realnetworks:helix_mobile_server:14.0.1
Realnetworks » Helix Server » Version: 12.0.0

cpe:2.3:a:realnetworks:helix_server:12.0.0
Realnetworks » Helix Server » Version: 12.0.1

cpe:2.3:a:realnetworks:helix_server:12.0.1
Realnetworks » Helix Server » Version: 13.0.0

cpe:2.3:a:realnetworks:helix_server:13.0.0
Realnetworks » Helix Server » Version: 13.1.1

cpe:2.3:a:realnetworks:helix_server:13.1.1
Realnetworks » Helix Server » Version: 14.0.0

cpe:2.3:a:realnetworks:helix_server:14.0.0
Realnetworks » Helix Server » Version: 14.0.1

cpe:2.3:a:realnetworks:helix_server:14.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-4235

Products

Pricing

Contact Us