CVE-2007-6036 The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash) via a short RTSP query, which causes a negative n...
HighCVSS 7.1
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash) via a short RTSP query, which causes a negative number to be used during memory allocation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| live555 media server | <= 2007.11.01 | No fix listed |
References
- aluigi.altervista.org exploit
- 27711 third-party-advisory vendor-advisory
- 29356 third-party-advisory
- GLSA-200803-22 vendor-advisory
- www.live555.com
- 20071118 Crash in LIVE555 Media Server 2007.11.01 mailing-list
- 26488 vdb-entry
- ADV-2007-3939 vdb-entry
- live555-rtsp-dos(38542) vdb-entry