Darwin Streaming Server

Vendor:

First CVE: Mar 7, 2003 · Active for 23 years

27

Total CVEs

More Total CVEs than 96% of tracked products

6.8

Avg CVEs / Year

Higher CVE frequency than 92% of tracked products

6.0

Avg CVSS

Higher Avg CVSS than 20% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Darwin Streaming Server over time

Volume of CVEsAvg CVSS Base Score

First CVE

Mar 7, 2003

23 years ago

Most Recent CVE

May 13, 2007

7,015 days ago

CVE Severity & Scoring

Darwin Streaming Server27 CVEs

11%

52%

37%

All CVEs352,785 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network1 (3.7%)

Unknown26 (96.3%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (3.7%)

High0 (0.0%)

Unknown26 (96.3%)

User Interaction

None1 (3.7%)

Unknown26 (96.3%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None1 (3.7%)

Unknown26 (96.3%)

Top CVEs

Signals from CVEs in this product scope (27 CVEs).

27 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2003-0050HIGH parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.	Mar 7, 2003	7.5	74	NO	YES
CVE-2003-0502HIGH Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (	Aug 27, 2003	10.0	31	NO	NO
CVE-2007-0748HIGH Heap-based buffer overflow in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allows remote attackers to execute arbitrary code via multiple trackID	May 13, 2007	10.0	27	NO	NO
CVE-2007-0749HIGH Multiple stack-based buffer overflows in the is_command function in proxy.c in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allow remote attackers	May 13, 2007	10.0	27	NO	NO
CVE-2003-0421HIGH Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port	Aug 27, 2003	10.0	25	NO	NO
CVE-2003-0426HIGH The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the a	Aug 27, 2003	10.0	25	NO	NO
CVE-2003-1414MEDIUM Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via	Dec 31, 2003	4.3	22	NO	YES
CVE-2004-1083HIGH Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which a	Dec 3, 2004	7.5	20	NO	NO
CVE-2004-1086HIGH Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file.	Dec 2, 2004	7.5	20	NO	NO
CVE-2004-0169MEDIUM QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes	Mar 15, 2004	5.0	20	NO	NO

View all 27 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (27 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

1 CVE

3.7% of CVEs· 96th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

2 CVEs

7.4% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (27 CVEs).

Media Mentions

Signals from CVEs in this product scope (27 CVEs).

Top CNAs Publishing CVEs For Darwin Streaming Server

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
5.5.4	2	10.0	6.5%	0
5.0.1	11	5.8	2.2%	0
4.1.3	18	6.0	2.3%	0
4.1.2	9	6.4	10.6%	2