CVE-2007-6036

The CVE-2007-6036 vulnerability affects LIVE555 Media Server up to version 2007.11.01, where parseRTSPRequestString mishandles short RTSP queries, allowing remote actors to trigger a daemon crash (DoS) by causing a negative value during memory allocation. Affected product: LIVE555 Media Server (p...

LIVE555 Media Server ParseRTSPRequestString远程拒绝服务漏洞

LIVE555 Media Server是一款RTSP媒体服务程序。 LIVE555 Media Server处理客户端畸形RTSP查询存在问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 问题是对客户端提供的数据reqStrSize缺少正确检查，函数使用无符号数据，因此"7 - 8"不是-1而是4294967295，导致内存破坏而造成拒绝服务攻击。 LIVE555 Media Server 2007.11.1 升级程序： LIVE555 Media Server 2007.11.1 LIVE555 FreeBSD on Intel x86 processors:...

liveMedia -- DoS vulnerability

The live555 development team reports: Fixed a bounds-checking error in "parseRTSPRequestString" caused by an int vs. unsigned problem. The function which handles the incoming queries from the clients is affected by a vulnerability which allows an attacker to crash the server remotely using the...

LIVE555 Media Server < 2007.11.18 DoS

Binary data 4289.prm...

[Full-disclosure] Crash in LIVE555 Media Server 2007.11.01

Luigi Auriemma Application: LIVE555 Media Server http://www.live555.com/mediaServer/ Versions: = 2007.11.01 Platforms: nix, Windows, Mac and others Bug: crash caused by access to unallocated memory Exploitation: remote, versus server Date: 18 Nov 2007 Author: Luigi Auriemma e-mail:...

LIVE555 Media Server 2007.11.1 - ParseRTSPRequestString Remote Denial of Service

LIVE555 Media Server 2007.11.1 - ParseRTSPRequestString Remote Denial of Service source: https://www.securityfocus.com/bid/26488/info LIVE555 Media Server is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this...

LIVE555 media server DoS

Uninitialized memory reading on RTSP query processing...

LIVE555 Media Server 2007.11.1 - ParseRTSPRequestString Remote Denial of Service

source: https://www.securityfocus.com/bid/26488/info LIVE555 Media Server is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to crash the application, resulting in denial-of-service conditions. LIVE555...