CVE-2015-8270

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash).

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2017/dsa-3850
http://www.securityfocus.com/bid/95126Third Party Advisory, Vendor Advisory
http://www.talosintelligence.com/reports/TALOS-2016-0066/Exploit, Technical Description, Third Party Advisory, VDB Entry
http://www.debian.org/security/2017/dsa-3850
http://www.securityfocus.com/bid/95126Third Party Advisory, Vendor Advisory
http://www.talosintelligence.com/reports/TALOS-2016-0066/Exploit, Technical Description, Third Party Advisory, VDB Entry

Timeline

Published: Apr 13, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-82719.8The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.CVE-2015-82726.5RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).CVE-2015-82755.5LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to write to arbitrary files via crafted EDOC files.CVE-2015-82765.5LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to read arbitrary files via crafted EDOC files.CVE-2015-82779.8Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote at CVE-2015-82798.6Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script CVE-2015-82807.5Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading detailed error messages.CVE-2015-82817.5Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem encryption via XOR calculations.CVE-2015-82829.8SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.CVE-2015-82836.5Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.CVE-2015-82848.8SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.CVE-2015-82857.5The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service.