CVE-2007-6036

The CVE-2007-6036 vulnerability affects LIVE555 Media Server up to version 2007.11.01, where parseRTSPRequestString mishandles short RTSP queries, allowing remote actors to trigger a daemon crash (DoS) by causing a negative value during memory allocation. Affected product: LIVE555 Media Server (p...

CVE-2007-6036

The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service daemon crash via a short RTSP query, which causes a negative number to be used during memory allocation...

LIVE555 Media Server ParseRTSPRequestString远程拒绝服务漏洞

LIVE555 Media Server是一款RTSP媒体服务程序。 LIVE555 Media Server处理客户端畸形RTSP查询存在问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 问题是对客户端提供的数据reqStrSize缺少正确检查，函数使用无符号数据，因此"7 - 8"不是-1而是4294967295，导致内存破坏而造成拒绝服务攻击。 LIVE555 Media Server 2007.11.1 升级程序： LIVE555 Media Server 2007.11.1 LIVE555 FreeBSD on Intel x86 processors:...

liveMedia -- DoS vulnerability

The live555 development team reports: Fixed a bounds-checking error in "parseRTSPRequestString" caused by an int vs. unsigned problem. The function which handles the incoming queries from the clients is affected by a vulnerability which allows an attacker to crash the server remotely using the...

LIVE555 media server DoS

Uninitialized memory reading on RTSP query processing...

Helix DNA Server RTSP server memory corruption

Memory corruption on multiple RTSP Real Time Streaming Protocol "Require" headers...

[Full-disclosure] [MU-200708-01] Helix DNA Server Heap Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Helix DNA Server Heap Corruption Vulnerability MU-200708-01 August 24, 2007 http://labs.musecurity.com/advisories.html Affected Products/Versions: Helix DNA Server versions 11.x Product Overview: https://helix-server.helixcommunity.org/ The Real Time...

Heap overflow

Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers...

CVE-2007-4561

Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers...

CVE-2007-4561

Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers...

CVE-2007-4561

The CVE-2007-4561 issue affects RealNetworks Helix DNA Server/Helix Server where the RTSP service processes crafted RTSP requests with multiple Require headers, triggering a heap-based buffer overflow. This allows remote code execution with the server’s privileges (often SYSTEM). Affected version...

Real Networks Helix服务器RTSP命令远程堆溢出漏洞

BUGTRAQ ID: 25440 Helix Server是一款支持多格式、跨平台的流媒体服务器软件。 Helix Server处理畸形请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果向Helix服务器的RTSP服务发送了包含有多个Require头的RTSP服务的话，就可能触发堆溢出，导致执行任意指令。 Real Networks Helix Server 11.x 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://helix-server.helixcommunity.org/...

RealNetworks Helix DNA Server RTSP Service Crafted Require Header Remote Overflow

The remote host is running Helix Server or Helix DNA Server, a media streaming server. The version of the Helix server installed on the remote host reportedly contains a heap overflow that is triggered using an RTSP command with multiple 'Require' headers. An unauthenticated, remote attacker can...

Helix Server < 11.1.4 RTSP Command Multiple Requires Overflow

Binary data 4192.prm...

Darwin Streaming Server < 5.5.5 Multiple RCE Vulnerabilities

According to its banner, the version of Apple Darwin Streaming Server running on the remote host is prior to version 5.5.5. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists in the Apple Darwin Streaming Proxy that allows an unauthenticated, remote...

CVE-2007-0749

Multiple stack-based buffer overflows in the iscommand function in proxy.c in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allow remote attackers to execute arbitrary code via a long 1 cmd or 2 server value in an RTSP request...

Stack overflow

Multiple stack-based buffer overflows in the iscommand function in proxy.c in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allow remote attackers to execute arbitrary code via a long 1 cmd or 2 server value in an RTSP request...

Heap overflow

Heap-based buffer overflow in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allows remote attackers to execute arbitrary code via multiple trackID values in a SETUP RTSP request...

CVE-2007-0748

Heap-based buffer overflow in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allows remote attackers to execute arbitrary code via multiple trackID values in a SETUP RTSP request...

CVE-2007-0749

Apple Darwin Streaming Proxy contains a stack-based buffer overflow in the is_command() function of proxy.c, exploitable via an overly long cmd or server value in an RTSP request. Affected: Darwin Streaming Server before 5.5.5. Impact: remote code execution with the privileges of the running serv...