CVE-2007-0748

Heap-based buffer overflow in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allows remote attackers to execute arbitrary code via multiple trackID values in a SETUP RTSP request...

CVE-2007-0749

Multiple stack-based buffer overflows in the iscommand function in proxy.c in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allow remote attackers to execute arbitrary code via a long 1 cmd or 2 server value in an RTSP request...

Heap overflow

Heap-based buffer overflow in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allows remote attackers to execute arbitrary code via multiple trackID values in a SETUP RTSP request...

CVE-2007-0749

Multiple stack-based buffer overflows in the iscommand function in proxy.c in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allow remote attackers to execute arbitrary code via a long 1 cmd or 2 server value in an RTSP request...

CVE-2007-0748

The CVE-2007-0748 entry concerns Apple Darwin Streaming Server prior to 5.5.5, where the Darwin Streaming Proxy is vulnerable to a heap-based buffer overflow via multiple trackID values in a SETUP RTSP request. This allows remote code execution with the service’s privileges. A related, separate C...

CVE-2007-0749

Apple Darwin Streaming Proxy contains a stack-based buffer overflow in the is_command() function of proxy.c, exploitable via an overly long cmd or server value in an RTSP request. Affected: Darwin Streaming Server before 5.5.5. Impact: remote code execution with the privileges of the running serv...

Apple Darwin Streaming Proxy multiple buffer overflows

Multiple buffer overflows on parsing different commands...

iDefense Security Advisory 05.10.07: Apple Darwin Streaming Proxy Multiple Vulnerabilities

Apple Darwin Streaming Proxy Multiple Vulnerabilities iDefense Security Advisory 05.10.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 10, 2007 I. BACKGROUND Darwin Streaming Server is a server technology that facilitates streaming of QuickTime data to clients across the Internet...

MOAB-02-01-2007: VLC Media Player udp:// Format String Vulnerability

Summary The following description of the software is provided by vendor VideoLAN: VideoLAN is a software project, which produces free software for video, released under the GNU General Public License. The main product is the cross-platform VLC media player. The VLC media player is a highly portab...

Jinzora Multiple Script include_path Parameter Remote File Inclusion

The remote host is running Jinzora, a web-based media streaming and management system written in PHP. The installation of Jinzora on the remote host fails to sanitize input to the 'includepath' parameter of several scripts before using it in the 'jzBackend.php' script to include PHP code. Provide...

xine-lib buffer overflow

Buffer overflow on parsing Real streaming protocol...

Microsoft Windows Media Format ASF Parsing Buffer Overflow (MS06-078; CVE-2006-4702)

Advanced Streaming Format ASF is a proprietary streaming format developed by Microsoft that defines the structure of complex, synchronized object data streams and provides streaming media services for the Windows Media framework. It is used for multimedia data including audio, video, still images...

MiMMS媒体流处理远程栈溢出漏洞

MiMMS是一款使用MMS协议下载并保存流媒体的程序。 MiMMS在处理畸形的数据时，远程攻击者可能利用此漏洞在用用户机器上执行任意指令。 MiMMS的getheader和getmediapacket函数在从服务器读取数据时存在栈溢出漏洞。如果用户受骗连接到了恶意的服务器的话，就会触发这个漏洞，导致执行任意代码。 xine xine-lib 1.1.0 xine xine-lib 1.0.1 xine xine-lib 1.0 MiMMS MiMMS 0.0.9 厂商补丁： Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200607-07）以及相应补丁:...

DEBIAN-CVE-2006-6172

Buffer overflow in the asmrpeval function in the RealMedia RTSP stream handler asmrp.c for Real Media input plugin, as used in 1 xine/xine-lib, 2 MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ruleboo...

Free resources undetected streaming media download technical overview-vulnerability warning-the black bar safety net

Now focus on the description I'm looking for the url of the experience: 1, From html source code to find Open IE to view/view source file in the Notepad and then find the Streaming Media protocols such as rtsp\pnm\mms\mmst, etc. or find it in the extension swf\wmv\rm\asf\avi, maybe you can see...

CVE-2006-5613

PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler mp3SDS 3.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter...

CVE-2006-5613

PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler mp3SDS 3.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter...

CVE-2006-5613

CVE-2006-5613 affects MP3 Streaming DownSampler (mp3SDS) 3.0. The vulnerability is a PHP remote file inclusion in Core/core.inc.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via the fullpath parameter. The issue is documented across multiple sources (NVD...

EUVD-2006-5598

PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler mp3SDS 3.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter...

Debian DSA-901-1 : gnump3d - programming error

Several vulnerabilities have been discovered in gnump3d, a streaming server for MP3 and OGG files. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2005-3349 Ludwig Nussel discovered several temporary files that are created with predictable filenames in a...