[Live-devel] RTP receivers (including RTSP clients and proxy servers) should upgrade to use the latest version of the LIVE555 code

[Ross Finlayson]

If you have a RTP receiver (i.e., including a RTSP client and/or a proxy server) that uses the “LIVE555 Streaming Media” code - especially if you allow RTSP client connections to arbitrary Internet servers - then you should upgrade to the latest version of the code; see 	http://live555.com/liveMedia/faq.html#latest-version

There has recently been a fix to a bug that could have allowed a malicious server to send an (invalid) RTP packet that caused the receiver to get into an infinite loop.  (Previous bug fixes also protected against possible crashes caused by malicious servers.)


Ross Finlayson
Live Networks, Inc.
http://www.live555.com/