Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the RTSP_msg_len function in rtsp/RTSP_msg_len.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a large HTTP Content-Length value, which leads to an invalid memory access.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fenice远程溢出及拒绝服务漏洞
Vulnerability Description
Fenice是符合IETF标准的多媒体流服务器。 Fenice的实现上存在多个漏洞，远程攻击者可能利用这些漏洞在服务器上执行任意指令或导致拒绝服务攻击。 Fenice的RTSP模块使用parse_url函数解析URI中的服务器、端口和文件名。这个函数使用一些strcpy调用填充主函数所传送的服务器和file_name缓冲区，允许攻击者利用缓冲区溢出漏洞执行恶意指令。
CVSS Information
N/A
Vulnerability Type
N/A