CVE-2010-4235

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-134

Affected software

No affected versions have been published.

Timeline

Published
Apr 4, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2010

CVE-2010-42366.9Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges viaCVE-2010-42375.9Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate sigCVE-2010-42385.5The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 is used, allows guest OS users to caCVE-2010-42399.8Tiki Wiki CMS Groupware 5.2 has Local File InclusionCVE-2010-42406.1Tiki Wiki CMS Groupware 5.2 has XSSCVE-2010-42418.8Tiki Wiki CMS Groupware 5.2 has CSRFCVE-2010-42424.0The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versionCVE-2010-42434.9fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguCVE-2010-42456.1pootle 2.0.5 has XSS via 'match_names' parameterCVE-2010-42464.3Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary weCVE-2010-42475.5The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kerneCVE-2010-42484.9Race condition in the __exit_signal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of
CVE-2010-4235: Critical severity, CVSS 10.0 | Vulnix