Potential Buffer Overrun Vulnerabilities in Helix Universal Server 8.01

Updated March 03, 2003

A potential security exploit was discovered in RealServer 8.0.1 and earlier. This potential buffer overflow exists in the URL handling of RTSP methods. This potential exploit is known to affect Windows NT/2000/XP, but it also may affect other operating systems. RealNetworks has verified this issue DOES NOT affect RealServer 8.02 or later, including Helix Universal Server. RealNetworks recommends all customers update to RealServer version 8.02 or later or Helix Universal Server as soon as possible to limit exposure to this particular exploit.

Solution:

Upgrade to Helix Universal Server 9.01 (9.0.2.794).

Platform and configuration support details are available at: http://www.realnetworks.com/resources/contentdelivery/server/recommended_platforms.html

Warranty:

While RealNetworks endeavors to provide you with the highest quality products and services, we cannot guarantee and do not warrant that the operation of any RealNetworks product will be error-free, uninterrupted or secure. See your original license agreement for details of our limited warranty or warranty disclaimer.