CVE-2004-0389

7.5 highEPSS 55%

High (7.5) in realnetworks helix universal server. EPSS 55% chance of exploitation in the next 30 days.

RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 55% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2004-06-01
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

realnetworks:helix_universal_server

References

http://secunia.com/advisories/11395
http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities
http://www.securityfocus.com/bid/10157
https://exchange.xforce.ibmcloud.com/vulnerabilities/15880
http://secunia.com/advisories/11395

Check your stack JSON