A vulnerability has been reported in Helix Universal Server, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to insufficient validation of HTTP requests. This can be exploited to cause a vulnerable server to consume a large amount of memory and CPU resources by sending a specially crafted POST request with the "Content-Length" header set to -1.

The vulnerability has been reported in:
* Helix Universal Mobile Server & Gateway, versions 10.3.1.716 and prior.
* Helix Universal Server, version 9.0.4.958 and prior.

Solution
Apply updates.
Further details available to Secunia VIM customers

Provided and/or discovered by
Discovered by anonymous person and reported via iDEFENSE.

Original Advisory
Real Networks:
http://service.real.com/help/faq/security/security100704.html

iDEFENSE:
http://www.idefense.com/application/poi/display?id=151&type=vulnerabilities

Deep Links
Links available to Secunia VIM customers