VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 4, 2011· Updated Jun 16, 2026

CVE-2010-4235

CVE-2010-4235

Description

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

Affected products

12
  • RealNetworks/Helix Mobile Server5 versions
    cpe:2.3:a:realnetworks:helix_mobile_server:12.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:realnetworks:helix_mobile_server:12.0:*:*:*:*:*:*:*
    • cpe:2.3:a:realnetworks:helix_mobile_server:13.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:realnetworks:helix_mobile_server:14.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:realnetworks:helix_mobile_server:14.0.1:*:*:*:*:*:*:*
    • (no CPE)range: <14.2
  • RealNetworks/Helix Server7 versions
    cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:realnetworks:helix_server:12.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:realnetworks:helix_server:12.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:realnetworks:helix_server:13.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:realnetworks:helix_server:13.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:realnetworks:helix_server:14.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:realnetworks:helix_server:14.0.1:*:*:*:*:*:*:*
    • (no CPE)range: <14.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.