1. RealNetworks Helix Server is prone to a remote code-execution vulnerability because of a format-string error. Successful exploits can allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition. 2. RealNetworks Helix Server and Helix Mobile Server are prone to a remote stack-based buffer-overflow vulnerability due to a failure to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Updates are available. Please see the reference for more details.

• http://docs.real.com/docs/security/SecurityUpdate033111HS.pdf
• https://www.securityfocus.com/bid/47110

---

Updated on 2017-03-28