CVE-2006-6026
🔴 Łataj teraz
Przepełnienie bufora w Real Networks Helix Server umożliwia zdalne wykonanie kodu lub awarię aplikacji.
CVSS
10.0
EPSS
30.4%
Exploit
none
Vendor
realnetworks
Opis źródłowy (NVD)
Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a DESCRIBE request that contains an invalid LoadTestPassword field.
buffer-overflow dos
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 10.0 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 30.4% |
| Opublikowano (NVD) | 2006-11-21 23:07:00 UTC |
| Ostatnia modyfikacja (NVD) | 2026-04-23 00:35:47 UTC |
Referencje
- http://docs.real.com/docs/security/SecurityUpdate032107Server.pdf (cve@mitre.org)
- http://gleg.net/helix.txt (cve@mitre.org)
- http://lists.helixcommunity.org/pipermail/server-cvs/2007-January/003783.html (cve@mitre.org)
- http://secunia.com/advisories/22944 (cve@mitre.org) [Vendor Advisory]
- http://web.archive.org/web/20060502082622/www.gleg.net/vulndisco_pack_professional.shtml (cve@mitre.org)
- http://www.attrition.org/pipermail/vim/2007-March/001459.html (cve@mitre.org)
- http://www.attrition.org/pipermail/vim/2007-March/001468.html (cve@mitre.org)
- http://www.securityfocus.com/archive/1/463333/100/0/threaded (cve@mitre.org)
- http://www.securityfocus.com/bid/21141 (cve@mitre.org)
- http://www.securityfocus.com/bid/23068 (cve@mitre.org)
- http://www.vupen.com/english/advisories/2007/1056 (cve@mitre.org) [Vendor Advisory]
- https://www.exploit-db.com/exploits/3531 (cve@mitre.org)