TippingPoint Zero Day Initiative
 

RealNetworks Helix DNA Server RTSP DESCRIBE Heap Overflow Vulnerability

ZDI-08-089: December 16th, 2008

CVE ID

Affected Vendors

Affected Products

    Helix Server

TippingPoint™ IPS Customer Protection

TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID 5933. For further product information on the TippingPoint IPS:

Vulnerability Details

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of RealNetworks Helix Server. User interaction is not required to exploit this vulnerability. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the rmserver.exe process while processing the Proxy-Require header of an RTSP response. The service fails to check the length of the field leading to an exploitable heap based buffer overflow. Exploitation of this vulnerability allows an attacker to execute arbitrary code under the context of the SYSTEM user.

Vendor Response

RealNetworks states:


Disclosure Timeline

    2008-02-07 - Vulnerability reported to vendor
    2008-12-16 - Coordinated public release of advisory

Credit

This vulnerability was discovered by:
    Anonymous