Real Networks Helix Universal Server Remote Integer Handling Denial Of Service Vulnerability

Bugtraq ID:	11352
Class:	Input Validation Error
CVE:	CVE-2004-0774
Remote:	Yes
Local:	No
Published:	Oct 07 2004 12:00AM
Updated:	Jul 12 2009 07:06AM
Credit:	The discoverer of this vulnerability wishes to remain anonymous.
Vulnerable:	RealNetworks Helix Universal Mobile Server 10.3.1 .716 RealNetworks Helix Universal Mobile Server 10.1.1 .120 RealNetworks Helix Universal Mobile Gateway 10.3.1 .716 RealNetworks Helix Universal Mobile Gateway 10.1.1 .120 RealNetworks Helix Universal Gateway 9.0.2 .881 RealNetworks Helix Universal Gateway 9.0
Not Vulnerable:

Real Networks Helix Universal Server Remote Integer Handling Denial Of Service Vulnerability

A remote integer handling denial of service vulnerability affects the Real Networks Helix Universal Server. The problem surrounds the mishandling of some POST headers values.

An attacker can exploit this issue to cause the affected server to consume excessive computer resources and hang, denying service to legitimate users.

Real Networks Helix Universal Server Remote Integer Handling Denial Of Service Vulnerability

No exploit is required to leverage this issue.

Real Networks Helix Universal Server Remote Integer Handling Denial Of Service Vulnerability

Solution:
Real Networks has released an advisory dealing with this issue. Please see the referenced advisory for more information.

Real Networks Helix Universal Server Remote Integer Handling Denial Of Service Vulnerability

References:

• Home Page (Real Networks)
  
• Potential Server Exploit Vulnerability (Real Networks)
  
• RealNetworks Helix Server Content-Length Denial of Service Vulnerability (iDEFENSE)