PT-2019-16107 · Gpac+1 · Gpac+1
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GPAC versions 0.8.0 through 0.9.0-development-20191109
Description
A heap-based buffer overflow issue exists in the function
gf isom box parse ex() located in isomedia/box funcs.c.Recommendations
For GPAC version 0.8.0, update to a version that fixes the issue.
For GPAC version 0.9.0-development-20191109, update to a version that fixes the issue.
As a temporary workaround, consider restricting access to the
gf isom box parse ex() function until a patch is available.Exploit
Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Debian
Gpac