← Vulnerability feed

Vulnerability record · CVE-2004-0774 · published 3 November 2004

CVE-2004-0774: Realnetworks helix universal mobile server and gateway vulnerability

RRealnetworks · Helix Universal Mobile Server And Gateway

RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.

7.8 CVSS 2.0 High EPSS 1.9% · top 20.9%
7.8CVSS 2.0 base score
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.idefense.com/application/poi/display?id=151&type=vulnerabilities Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17648
http://www.idefense.com/application/poi/display?id=151&type=vulnerabilities Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17648

Track CVE-2004-0774 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-0389RealNetworks Helix Universal Server null dereference DoS via malformed RTSP requestsRealNetworks Helix Universal Server 9.0.1 and 9.0.2 crashes on malformed requests that trigger a null pointer dereference. The flaw is reachable over…EPSS 55%analysed7.5CVE-2003-0725RealNetworks Helix/RealServer RTSP parser buffer overflowThe RTSP protocol parser in the View Source plug-in (vsrcplin.so / vsrcplin3260.dll) shipped with RealNetworks Helix Universal Server 9 and RealSyste…EPSS 49%analysed7.5CVE-2002-1643RealNetworks Helix Universal Server RTSP/HTTP buffer overflows allow remote code executionRealNetworks Helix Universal Server 9.0 (9.0.2.768) contains multiple buffer overflows reachable over the network. A long Transport field in a SETUP …EPSS 75%analysed6.8CVE-2004-0049Realnetworks helix universal mobile server vulnerabilityHelix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Adminis…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2004-0774), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.