Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Helix_universal_server | Realnetworks | 9.0 (including) | 9.0 (including) |
| Helix_universal_server | Realnetworks | 9.0.2.768 (including) | 9.0.2.768 (including) |