CVE-2010-4235

CRITICAL 10.0CVE-2010-4235 · Published 04/04/2011 · updated 16/06/2026

In short

CVE-2010-4235 is a CRITICAL (CVSS 10.0) vulnerability affecting helix mobile server (realnetworks), helix server (realnetworks).
Chance of exploitation in the next 30 days (EPSS): 4.1%, higher than 90.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
helix mobile server realnetworks	`= 12.0= 13.1.1= 14.0.0= 14.0.1`	No fix yet
helix server realnetworks	`= 12.0.0= 12.0.1= 13.0.0= 13.1.1= 14.0.0= 14.0.1`	No fix yet

Description

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

References

docs.real.com/docs/security/SecurityUpdate033111HS.pdf · Vendor Advisory
securityfocus.com/bid/47110

More vulnerabilities in helix mobile server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2010-4235 is a CRITICAL (CVSS 10.0) vulnerability affecting helix mobile server (realnetworks), helix server (realnetworks).

Chance of exploitation in the next 30 days (EPSS): 4.1%, higher than 90.9% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

helix mobile server

realnetworks

= 12.0= 13.1.1= 14.0.0= 14.0.1

No fix yet

helix server

realnetworks

= 12.0.0= 12.0.1= 13.0.0= 13.1.1= 14.0.0= 14.0.1

No fix yet

More vulnerabilities in helix mobile server

See all →