Apple Darwin Streaming Server 4.1.2
Approved changes feed: RSS · Atom
cpe:2.3:a:apple:darwin_streaming_server:4.1.2:*:*:*:*:*:*:*
part: a version: 4.1.2 update: *
| Vendor | Apple (c2b419d0-9f0f-51c1-88dc-2e204a98e1c7) |
|---|---|
| Product | Darwin Streaming Server (938b62b9-b1ab-53bf-96c2-667034a9658f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/lstoll/dss |
purl2cpe | 2026-06-01 10:12:26.082822 |
pkg:github/macosforge/dss |
purl2cpe | 2026-06-01 10:12:26.082823 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-0749 |
vulnerable | 2026-06-08 04:49:33.264694 |
Details available
Multiple stack-based buffer overflows in the is_command function in proxy.c in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allow remote attackers to execute arbitrary code via a long (1) cmd or (2) server value in an RTSP request.
Published: 2007-05-13T22:00:00.000Z
Updated: 2024-08-07T12:26:54.488Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0748 |
vulnerable | 2026-06-08 04:49:33.260725 |
Details available
Heap-based buffer overflow in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allows remote attackers to execute arbitrary code via multiple trackID values in a SETUP RTSP request.
Published: 2007-05-13T22:00:00.000Z
Updated: 2024-08-07T12:26:54.484Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1414 |
vulnerable | 2026-06-08 04:47:47.514946 |
Details available
Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.
Published: 2007-10-20T10:00:00.000Z
Updated: 2024-08-08T02:28:03.582Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1413 |
vulnerable | 2026-06-08 04:47:47.514001 |
Details available
parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.
Published: 2007-10-20T10:00:00.000Z
Updated: 2024-08-08T02:28:02.935Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0054 |
vulnerable | 2026-06-08 04:47:20.362566 |
Details available
Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed using a browser.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T01:43:35.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0053 |
vulnerable | 2026-06-08 04:47:20.362115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0052 |
vulnerable | 2026-06-08 04:47:20.361782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0051 |
vulnerable | 2026-06-08 04:47:20.361470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0050 |
vulnerable | 2026-06-08 04:47:20.360076 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.