VULNERABILITY INTELLIGENCE

CVE-2010-4235

CVSS score10 HIGH
EPSS probability4.15%
CISA KEVNot currently listed
Published2011-04-04
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references