CVE-2006-2022: LS3 Fenice

High severity, CVSS 7.5. EPSS: 14.7% chance of exploitation in the next 30 days.

Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remote attackers to execute arbitrary code via a long URL.

Affected products

• LS3 Fenice: up to and including 1.10

Published 2006-04-25. Last modified 2026-06-16.