Realnetworks Helix Universal Server vulnerabilities

5 CVEs affecting Realnetworks Helix Universal Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0774, published 2004-11-03.

More from Realnetworks.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2002-1643, published 2002-12-19. High severity, CVSS 7.5. EPSS: 74.7% chance of exploitation in the next 30 days. Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a…
• CVE-2004-0389, published 2004-06-01. High severity, CVSS 7.5. EPSS: 54.9% chance of exploitation in the next 30 days. RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1)…
• CVE-2003-0725, published 2003-10-20. High severity, CVSS 7.5. EPSS: 48.6% chance of exploitation in the next 30 days. Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows…
• CVE-2004-0774, published 2004-11-03. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length…
• CVE-2004-0049, published 2004-02-17. Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days. Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.