CVE-2004-0169: Apple Darwin Streaming Server

Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days.

QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function.

Affected products

• Apple Darwin Streaming Server: version 4.1.3 only

Published 2004-03-15. Last modified 2026-06-16.