PT-2017-13608
CVE-2017-14647
·
Publicado
2017-09-21
·
Atualizado
2017-10-03
Descrição por
CVSS 3.1
8.8
AltaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Bento4 version 1.5.0-617
Description
A heap-based buffer overflow was discovered in the
AP4 VisualSampleEntry::ReadFields function in Core/Ap4SampleEntry.cpp. This issue causes an out-of-bounds write, potentially leading to remote denial of service or possibly code execution.Recommendations
For Bento4 version 1.5.0-617, as a temporary workaround, consider disabling the
AP4 VisualSampleEntry::ReadFields function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾