Description
QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function.
References
- APPLE-SA-2004-02-23 vendor-advisory
- 20040223 Darwin Streaming Server Remote Denial of Service Vulnerability third-party-advisory
- 6826 vdb-entry
- VU#460350 third-party-advisory
- 9735 vdb-entry
- 6837 vdb-entry
- darwin-describe-request-dos(15291) vdb-entry