CVE-2004-0169

Currently unrated

Key Information:

Vendor
Apple
Status
Darwin Streaming Server
Vendor
CVE Published:
15 March 2004

Summary

QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function.

References

http://lists.apple.com/archives/security-announce/2004/Fe...
vendor-advisoryx_refsource_APPLE
http://www.idefense.com/application/poi/display?id=75&typ...
third-party-advisoryx_refsource_IDEFENSE
http://www.osvdb.org/6826
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.