CVE-2007-6627 Integer overflow in n/a

High 7.5 Published 4 Jan 2008 Updated 7 Aug 2024

Remote attackers can cause a crash or execute arbitrary code via a crafted RTP packet with a specific size value in Feng RTSP server.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2007-6627?

CVE-2007-6627 is a high-severity vulnerability in n/a, published on 4 Jan 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Integer overflow in the RTSP_remove_msg function in RTSP_lowlevel.c in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an RTP packet with a size value of 0xffff.

Weakness: CWE-189

Which versions are affected by CVE-2007-6627?

It affects 1 product.

Products include Feng Feng.

How do I fix CVE-2007-6627?

No fix has been published for CVE-2007-6627 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-6627 being exploited?

There is no known exploitation of CVE-2007-6627 in the wild and no public exploit code.

Sources

Also known as GHSA-4c75-p685-qq3x.