CVE:CVE-2006-6026
CNNVD:CNNVD-200611-381
Helix Server是一款支持多格式、跨平台的流媒体服务器软件。
Helix Server在处理带有畸形参数的DESCRIBE请求时存在漏洞，远程攻击者可能利用此漏洞控制服务器。如果向Helix Server发送了包含有无效LoadTestPassword字段的特制DESCRIBE请求的话，就可以触发堆溢出，导致执行任意指令。
solution:Upgrade realnetworks helix_dna_server to a higher version than 11.0,11.1,and avoid the version 11.0,11.1; Upgrade realnetworks helix_mobile_server to a higher version than 11.1.2,and avoid the version (,11.1.2]; Upgrade realnetworks helix_server to a higher version than 11.1.2,11.0,11.1,and avoid the version (,11.1.2],11.0,11.1