CVE-2008-5911
Last modified
CVE-2008-5911 is a vulnerability of currently unknown severity. Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request.. EPSS estimates a 6.19% chance of exploitation in the next 30 days.
Description
Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Realnetworks | Helix Server | 11.0 |
| Realnetworks | Helix Server | 12.0.0 |
| Realnetworks | Helix Server Mobile | 11.0 |
| Realnetworks | Helix Server Mobile | 12.0.0 |
References
- http://secunia.com/advisories/33360Vendor Advisory
- http://secunia.com/advisories/33360Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-5911?
How severe is CVE-2008-5911?
How do I fix CVE-2008-5911?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-5905The web interface plugin in KTorrent before 3.1.4 allows rem…
- CVE-2008-5906Eval injection vulnerability in the web interface plugin in …
- CVE-2008-5907The png_check_keyword function in pngwutil.c in libpng befor…
- CVE-2008-5908Unspecified vulnerability in the root/boot archive tool in S…
- CVE-2008-5909Unspecified vulnerability in conv_lpd in Sun OpenSolaris has…
- CVE-2008-5910Unspecified vulnerability in txzonemgr in Sun OpenSolaris ha…
- CVE-2008-5912An unspecified function in the JavaScript implementation in …
- CVE-2008-5913The Math.random function in the JavaScript implementation in…
- CVE-2008-5914An unspecified function in the JavaScript implementation in …
- CVE-2008-5915An unspecified function in the JavaScript implementation in …
- CVE-2008-5916gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.…
- CVE-2008-5917Cross-site scripting (XSS) vulnerability in the XSS filter (…
Are you affected by CVE-2008-5911?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST