CVE-2004-0389
high · 7.5RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.
7.5
CVSS
54.9%
EPSS (exploit prob.)
99th
EPSS percentile
2004-06-01
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-476
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| realnetworks | helix_universal_server | 9.0.1 |
| realnetworks | helix_universal_server | 9.0.2 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/11395
- http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities
- http://www.securityfocus.com/bid/10157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15880
- http://secunia.com/advisories/11395
- http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities
- http://www.securityfocus.com/bid/10157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15880
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2004-0389