CVE-2007-0749

Published May 13, 2007

Last updated 7 years ago

Overview

Description: Multiple stack-based buffer overflows in the is_command function in proxy.c in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allow remote attackers to execute arbitrary code via a long (1) cmd or (2) server value in an RTSP request.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:apple:darwin_streaming_server:4.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3F40D1E1-10B3-4A7C-A945-A8D74F3DCB35"
          },
          {
            "criteria": "cpe:2.3:a:apple:darwin_streaming_server:5.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CCC88BC5-0CA9-4B24-ACBD-14A4762A8252"
          },
          {
            "criteria": "cpe:2.3:a:apple:darwin_streaming_server:5.5.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6693434C-2244-47F9-94A7-F5D6CE50C245"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "38F17066-C090-4DD7-A1AC-D8FF70D268CE"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "1E997653-C744-4F1F-9948-47579AB3BED3"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "384C130F-D1A9-4482-AF20-FC81933473A3"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "74BCDEA0-2F69-4411-98C5-29C3C0533BDE"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References