Summary
Dave McDaniel discovered that rtmpdump incorrectly handled certain
malformed streams. If a user were tricked into processing a specially
crafted stream, a remote attacker could cause rtmpdump to crash, resulting
in a denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | rtmpdump | 2.4+20121230.gitdf6c518-1ubuntu0.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | rtmpdump | 2.4+20151223.gitfa8646d-1ubuntu0.1 |
Vulnerabilities 3
-
Unscored —
The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (inv…
-
Unscored —
The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.
-
Unscored —
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).