CVE-2007-6036: Input Validation
Published Nov 20, 2007
·Updated
The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash) via a short RTSP query, which causes a negative number to be used during memory allocation.
Affected Software
1 affected component
Live555 Media Server<=2007.11.01
Event History
Nov 20, 2007
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6036?
CVE-2007-6036 has a moderate severity rating as it can lead to denial of service through a daemon crash.
2
How do I fix CVE-2007-6036?
To fix CVE-2007-6036, upgrade to a version of LIVE555 Media Server released after 2007.11.01.
3
What software is affected by CVE-2007-6036?
CVE-2007-6036 affects LIVE555 Media Server versions up to and including 2007.11.01.
4
What type of attack is related to CVE-2007-6036?
CVE-2007-6036 is related to a denial of service attack that can be executed via a specially crafted RTSP query.
5
What function is vulnerable in CVE-2007-6036?
The vulnerable function in CVE-2007-6036 is parseRTSPRequestString in the LIVE555 Media Server.