CVE-2004-0169 QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to....
MediumCVSS 5.0
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple darwin streaming server | = 4.1.3 | No fix listed |
References
- APPLE-SA-2004-02-23 vendor-advisory
- 20040223 Darwin Streaming Server Remote Denial of Service Vulnerability third-party-advisory
- VU#460350 third-party-advisory us-government-resource
- 6826 vdb-entry
- 6837 vdb-entry
- 9735 patch vdb-entry vendor-advisory
- darwin-describe-request-dos(15291) vdb-entry