PT-2017-13330
CVE-2017-14261
·
تاريخ النشر
2017-09-11
·
تاريخ التحديث
2017-09-19
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Bento4 version 1.5.0-616
Description
The issue is related to a Read Memory Access Violation vulnerability in the AP4 StszAtom class, located in the Ap4StszAtom.cpp file. This vulnerability can be exploited by opening a specially crafted .MP4 file.
Recommendations
For Bento4 version 1.5.0-616, consider avoiding the use of the AP4 StszAtom class until a patch is available. As a temporary workaround, restrict the opening of .MP4 files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾