CVE-2007-0749

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-05-13 · updated 2026-06-16

Description

Multiple stack-based buffer overflows in the is_command function in proxy.c in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allow remote attackers to execute arbitrary code via a long (1) cmd or (2) server value in an RTSP request.

Affected products

Apple Darwin Streaming Server: 4.1.2, 5.0.1, 5.5.4, 4.1.3

References

http://docs.info.apple.com/article.html?artnum=305495
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=533
http://lists.apple.com/archives/Security-announce/2007/May/msg00002.html
http://osvdb.org/35976
http://secunia.com/advisories/25193
http://www.securityfocus.com/bid/23918
http://www.securitytracker.com/id?1018047
http://www.vupen.com/english/advisories/2007/1770
https://exchange.xforce.ibmcloud.com/vulnerabilities/34222
http://docs.info.apple.com/article.html?artnum=305495
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=533
http://lists.apple.com/archives/Security-announce/2007/May/msg00002.html

Get alerted when CVE-2007-0749 or the next vulnerability affects your stack