CVE-2012-1985: Realnetworks Helix Mobile Server

Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service (stack consumption and daemon crash) via a malformed URL.

Affected products

• Realnetworks Helix Mobile Server: version 14.0.0 only; version 14.0.1 only
• Realnetworks Helix Server: version 14.0.0 only; version 14.0.1 only; version 14.2 only; version 14.2.0.212 only

Published 2012-04-17. Last modified 2026-06-16.