Bugtraq mailing list archives
Denial of Dervice vulnerability in Helix Mobile Server (RealNetworks) (14.0.0.348) with long string to PluginDirectory in rmserver.cfg file
From: praveen_recker () sify com
Date: Mon, 24 May 2010 06:00:50 -0600
Reproducing the Issue: In configuration file rmserver.cfg located at C:\Program Files\Real\Helix Server give below string as path <Var PluginDirectory="A * 5000"/> Versioning information of Softwares: Microsoft XP Professional SP2 with Helix Mobile Server (RealNetworks) (14.0.0.348) (Build 211367/15270) Trial. With the mailicious config when we open the server by double clicking rmserver.exe at C:\Program Files\Real\Helix Server\Bin or Start -> Programs -> Helix Mobile Server -> Helix Mobile Server rmserver.exe process CPU usage will shoot upto 90+ percentage and remains there !!!
Current thread:
- Denial of Dervice vulnerability in Helix Mobile Server (RealNetworks) (14.0.0.348) with long string to PluginDirectory in rmserver.cfg file praveen_recker (May 25)