RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Helix_universal_mobile_server_and_gateway | Realnetworks | * | 10.3.1.716 (including) |
| Helix_universal_server | Realnetworks | * | 9.0.4.958 (including) |
| Helix_universal_server | Realnetworks | 9.0.2 (including) | 9.0.2 (including) |