Both flaws could result in a heap buffer overflow triggered by a maliciously-crafted RTSP request. Once initiated, the buffer overflow could potentially cause Darwin Streaming Server to unexpectedly quit, or allow an attacker to run unauthorized code on the attacked machine.
Darwin Streaming Server 5.5.5 is free and available for download at the Apple Developer Web site.
Don’t miss the best of The Mac Observer
Set us as a preferred source and our Apple reporting ranks higher in your Google Search results and Discover feed — one tap, no account changes.
Discussion