Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-06535
HistoryDec 01, 2020 - 12:00 a.m.

ReadyMedia Remote Code Execution Vulnerability

2020-12-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
15

EPSS

0.071

Percentile

94.0%

ReadyMedia is a simple media server software designed to be fully compatible with DLNA/UPnP-AV clients.A remote code execution vulnerability exists in versions prior to ReadyMedia 1.3.0. An attacker could exploit the vulnerability by sending malicious UPnP HTTP requests to the miniDLNA service using HTTP chunking encoding to cause a signature error, which could lead to a buffer overflow that could enable remote code execution.