CVE:CVE-2007-6628
CNNVD:CNNVD-200801-017
LScube Feng 0.1.15以及更早的版本允许远程攻击者借助于(1)一个会导致RTSP_setup.c中parse_transport_header无解的畸形的Transport页眉或(2)一个会导致RTSP_Play中parse_play_time_range无解的畸形的Range页眉来引起拒绝服务攻击。
solution:Upgrade feng feng to a higher version than 0.1.15,and avoid the version (,0.1.15]