PT-2023-32799 · Unknown · Phz76 Rtspserver
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
PHZ76 RtspServer version 1.0.0
Description
A critical issue was found in the
ParseRequestLine function of the RtspMesaage.cpp file, leading to a stack-based buffer overflow. This issue can be exploited remotely. The exploit has been disclosed publicly. The vendor was contacted about this issue but did not respond.Recommendations
For PHZ76 RtspServer version 1.0.0, as a temporary workaround, consider disabling the
ParseRequestLine function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.Exploit
Fix
Memory Corruption
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Phz76 Rtspserver