Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability
Summary: Cisco Talos disclosed a code execution vulnerability in Live Networks' LIVE555 streaming media RTSPServer, discovered by Talos researcher Lilith Wyatt. A specially crafted packet with multiple "Accept:" or "x-sessioncookie" strings can trigger a stack-based buffer overflow in the "lookForHeader" function that parses HTTP headers for tunneling RTSP over HTTP, a service typically bound to TCP 80, 8000, or 8080.
Key Takeaway: The flaw sits in the RTSP server library, not the media players that use it, so the exposure belongs to whatever host is listening on those HTTP tunnel ports - and a single crafted packet is enough to reach code execution.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026