CVE-2007-4561
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote...
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
- Record
CVE-2007-4561- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20, CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
- Record
CVE-2007-4561- Updated
- 2026-11-02
EUVDEUVD-2007-4543 No score
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
- Record
EUVD-2007-4543- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5vp-hv57-2vcx No score
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote...
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
- Record
GHSA-r5vp-hv57-2vcx- Weakness
- CWE-20, CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4561 is a high vulnerability (CVSS 10.0) in Realnetworks Helix Dna Server, published August 28, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.51%, the 92nd percentile. No source names a fixed version.
References
securityfocus.com/bid/25440
marc.info?l=full-disclosure&m=118800391412961&w=2
vupen.com/english/advisories/2007/2986
labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt
secunia.com/advisories/26609
securitytracker.com/id?1018605
securityreason.com/securityalert/3069
nvd.nist.gov/vuln/detail/CVE-2007-4561
github.com/advisories/GHSA-r5vp-hv57-2vcx