bugtraq - Denial of Dervice vulnerability in Helix Mobile Server (RealNetworks) (14.0.0.348) with long string to PluginDirectory in rmserver.cfg file

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <201005241200.o4OC0oub007735@www3.securityfocus.com>
Date: Mon, 24 May 2010 06:00:50 -0600
From: praveen_recker@...y.com
To: bugtraq@...urityfocus.com
Subject: Denial of Dervice vulnerability in Helix Mobile Server
 (RealNetworks) (14.0.0.348) with long string to PluginDirectory in
 rmserver.cfg file

Reproducing the Issue:
In configuration file rmserver.cfg located at C:\Program Files\Real\Helix Server give below string as path
<Var PluginDirectory="A * 5000"/>

Versioning information of Softwares:
Microsoft XP Professional SP2 with Helix Mobile Server (RealNetworks) (14.0.0.348) (Build 211367/15270) Trial.

With the mailicious config when we open the server by double clicking rmserver.exe at C:\Program Files\Real\Helix Server\Bin
                              or
Start -> Programs -> Helix Mobile Server -> Helix Mobile Server

rmserver.exe process CPU usage will shoot upto 90+ percentage and remains there !!!