CVE-2019-12727

On Ubiquiti airCam 3.1.4 devices, a Denial of Service vulnerability exists in the RTSP Service provided by the ubnt-streamer binary. The issue can be triggered via malformed RTSP requests that lead to an invalid memory read. To exploit the vulnerability, an attacker must craft an RTSP request wit...

Design/Logic Flaw

On Ubiquiti airCam 3.1.4 devices, a Denial of Service vulnerability exists in the RTSP Service provided by the ubnt-streamer binary. The issue can be triggered via malformed RTSP requests that lead to an invalid memory read. To exploit the vulnerability, an attacker must craft an RTSP request wit...

CVE-2019-12727

The CVE-2019-12727 entry affects Ubiquiti airCam 3.1.4, where the RTSP service implemented by the ubnt-streamer binary is vulnerable to a Denial of Service caused by malformed RTSP requests containing an excessive number of headers. The resulting issue is an invalid memory read that can crash the...

CVE-2019-12727

On Ubiquiti airCam 3.1.4 devices, a Denial of Service vulnerability exists in the RTSP Service provided by the ubnt-streamer binary. The issue can be triggered via malformed RTSP requests that lead to an invalid memory read. To exploit the vulnerability, an attacker must craft an RTSP request wit...

Ubiquiti airCam RTSP Service 1.1.5 - Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com Buffer overflow in Ubiquiti airCam RTSP service 1. Advisory Information Title: Buffer overflow in Ubiquiti airCam RTSP service Advisory ID: CORE-2013-0430 Advisory URL:...

Ubiquiti airCam < 1.2.0 ubnt-streamer RTSP Service Remote Code Execution

According to its self-reported version number, the firmware installed on the remote host is prior to 1.2.0. It is, therefore, affected by a remote code execution vulnerability in the 'ubnt-streamer' RTSP service when parsing an overly large URI of a RTSP request message. An attacker can exploit...

CVE-2013-1606

Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request...

CVE-2013-1606

CVE-2013-1606: Buffer overflow in Ubiquiti airCam ubnt-streamer RTSP service prior to firmware 1.1.6 (AirCam/airVision) allows remote code execution via a crafted long RTSP DESCRIBE URI. Affected devices include AirCam models (v1.1.5 confirmed; pre-1.1.6). Root cause: parsing of RTSP URI overflow...

CVE-2013-1606

Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request...

Ubiquiti airCam buffer overflow

Buffer overflow in RTSP service...

CORE-2013-0430 - Buffer overflow in Ubiquiti airCam RTSP service

Core Security - Corelabs Advisory http://corelabs.coresecurity.com Buffer overflow in Ubiquiti airCam RTSP service 1. Advisory Information Title: Buffer overflow in Ubiquiti airCam RTSP service Advisory ID: CORE-2013-0430 Advisory URL:...

Ubiquiti airCam RTSP Service 1.1.5 - Buffer Overflow (PoC)

Core Security - Corelabs Advisory http://corelabs.coresecurity.com Buffer overflow in Ubiquiti airCam RTSP service 1. Advisory Information Title: Buffer overflow in Ubiquiti airCam RTSP service Advisory ID: CORE-2013-0430 Advisory URL:...

Ubiquiti airCam RTSP Service 1.1.5 - Buffer Overflow (PoC)

Ubiquiti airCam RTSP Service 1.1.5 - Buffer Overflow PoC Core Security - Corelabs Advisory http://corelabs.coresecurity.com Buffer overflow in Ubiquiti airCam RTSP service 1. Advisory Information Title: Buffer overflow in Ubiquiti airCam RTSP service Advisory ID: CORE-2013-0430 Advisory URL:...

Ubiquiti airCam RTSP Service Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com Buffer overflow in Ubiquiti airCam RTSP service 1. Advisory Information Title: Buffer overflow in Ubiquiti airCam RTSP service Advisory ID: CORE-2013-0430 Advisory URL:...

Heap overflow

Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers...

CVE-2007-4561

Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers...

CVE-2007-4561

Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers...

CVE-2007-4561

The CVE-2007-4561 issue affects RealNetworks Helix DNA Server/Helix Server where the RTSP service processes crafted RTSP requests with multiple Require headers, triggering a heap-based buffer overflow. This allows remote code execution with the server’s privileges (often SYSTEM). Affected version...