exploitDog

CVE-2014-8001

Опубликовано: 25 нояб. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

Ссылки

http://tools.cisco.com/security/center/viewAlert.x?alertId=36500
Patch
Vendor Advisory
https://github.com/cisco/openh264/pull/1088/files
Patch
http://tools.cisco.com/security/center/viewAlert.x?alertId=36500
Patch
Vendor Advisory
https://github.com/cisco/openh264/pull/1088/files
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:openh264:*:*:*:*:*:*:*:*

Версия до 1.2.0 (включая)

EPSS

Процентиль: 86%

0.03043

Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2014-8001

debian

около 11 лет назад

Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allo ...

GHSA-w453-vmqq-j7q6

github

больше 3 лет назад

Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

EPSS

Процентиль: 86%

0.03043

Низкий

7.5 High

CVSS2

Дефекты

CWE-119