<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">The latest version - 2013.11.26 - of the "LIVE555 Streaming Media" code fixes a serious potential buffer-overflow bug in the RTSP command parsing code. This bug could potentially allow an attacker (with a malicious RTSP client or server) to cause cause arbitrary code to be executed in your own RTSP server or client.<div><br></div><div>IMPORTANT NOTE: All LIVE555-based applications that include a RTSP client or RTSP server should ***upgrade to this latest version ASAP***!</div><div><br></div><div>(The bug affected RTSP clients as well as RTSP servers, because RTSP clients can also receive commands.)</div><div><br></div><div>Many thanks to iSEC Partners <<a href="http://isecpartners.com/">http://isecpartners.com/</a>> for discovering and reporting this bug.</div><br><br><div apple-content-edited="true">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">Ross Finlayson<br>Live Networks, Inc.<br><a href="http://www.live555.com/">http://www.live555.com/</a></span></span>
</div>
<br></body></html>