[Full-disclosure] [MU-200606-01] Real Helix RTSP Server Heap Corruption Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Real Helix RTSP Server Heap Corruption Vulnerabilities [MU-200606-01]
June 22, 2006

http://labs.musecurity.com/advisories.html

Affected Product / Versions:

Real Networks Helix DNA Server 11.0.x
Real Networks Helix DNA Server 10.0.x

Product Overview:

The Real Time Streaming Protocol (RTSP) is a protocol which allows a
client to remotely control a streaming media server. RTSP is
implemented in the Real Helix Server, a cross platform media
streaming server with a wide deployment.

Vulnerability Details:

A remote buffer overflow condition in Real Helix's RTSP service could
allow for arbitrary code execution. The vulnerable code is triggered
with the use of a malformed HTTP header.

A second vulnerability of equal criticality was also discovered.
This bug involved the parsing of HTTP URLs.

Vendor Response / Solution:

Mu Security would like to thank Real for timely remediation of these
vulnerabilities.

Credit:

This vulnerability was discovered by the Mu Security research team.

http://labs.musecurity.com/pgpkey.txt

Mu Security is an early-stage innovator creating a new class of
security analysis system. The company's mission is to widely deploy
security analysis and reduce product and application vulnerabilities.
Mu's founders include industry-recognized experts in the IDP, open
source protocol analysis tools, ethical hacking, and network
management markets The security analysis process and product solution
provide a rigorous and streamlined methodology for verifying and
improving the security readiness of any IP-based product or
application. Mu Security, headquartered in Sunnyvale, California, is
backed by preeminent venture capital firms including Accel Partners
and Benchmark Capital.

The information within this paper may change without notice. Use of
this information constitutes acceptance for use in an AS IS
condition. There are no warranties, implied or express, with regard
to this information. In no event shall the author be liable for any
direct or indirect damages whatsoever arising out of or in connection
with the use or spread of this information. Any use of this
information is at the user's own risk.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (Darwin)

iD8DBQFEmu4OMl+docYeP+YRApi1AJ9BIZQvNfsJhAl2tWeI74LmfO8JUQCfarx7
QEPD6E9M96Ywi/B57n7Cdkw=
=34aO
-----END PGP SIGNATURE-----

---

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/