A remote buffer overflow condition in Real Helix’s RTSP service could allow for arbitrary code execution. The vulnerable code is triggered with the use of a malformed HTTP header. A second vulnerability of equal criticality was also discovered. This bug involved the parsing of HTTP URLs. Affected versions include Real Networks Helix DNA Server 11.0.x and Real Networks Helix DNA Server 10.0.x.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47767/MU-200606-01.txt
Source: https://packetstormsecurity.com/files/47767/MU-Security-Advisory-2006-06.01.html