Apple DSS 5.5.5 update

Apple has released a security update to its Darwin Streaming Server, its open source project. DSS 5.5.5 fixes two security flaws, including one where a remote attacker may be able to cause an unexpected application termination or arbitrary code execution. The company said a stack buffer overflow exists in the Darwin Streaming Proxy and that by sending maliciously-crafted RTSP requests, a remote attacker can trigger the overflow, which may lead to an unexpected application termination or arbitrary code execution.

The update addresses the issue by performing additional validation of RTSP requests. The update also fixes a flaw where a remote attacker may be able to cause an unexpected application termination or arbitrary code execution due to a heap buffer overflow in the Darwin Streaming Proxy.

The DSS 5.5.5 update is available for Mac OS X, Windows, and Linux version of the software along with the updated source code.

by MacNN Staff