Realnetworks Helix Dna Server vulnerabilities

4 CVEs affecting Realnetworks Helix Dna Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-1317, published 2010-04-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-3276, published 2006-06-28. High severity, CVSS 7.5. EPSS: 13.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long User-Agent HTTP header in the RTSP service and (2)…
CVE-2006-6026, published 2006-11-21. High severity, CVSS 10.0. EPSS: 10.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of service (application…
CVE-2007-4561, published 2007-08-28. High severity, CVSS 10.0. EPSS: 5.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
CVE-2010-1317, published 2010-04-20. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via…