CVE-2017-14638

Опубликовано: 21 сент. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType in Core/Ap4Atom.h.

Ссылки

https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsettype-ap4atom-h/
Exploit
Issue Tracking
Patch
Third Party Advisory
VDB Entry
https://github.com/axiomatic-systems/Bento4/commit/be7185faf7f52674028977dcf501c6039ff03aa5
Patch
Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/182
Exploit
Third Party Advisory
https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsettype-ap4atom-h/
Exploit
Issue Tracking
Patch
Third Party Advisory
VDB Entry
https://github.com/axiomatic-systems/Bento4/commit/be7185faf7f52674028977dcf501c6039ff03aa5
Patch
Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/182
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bento4:bento4:1.5.0-617:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00572

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2017-14638

CVSS3: 6.5

ubuntu

больше 8 лет назад

GHSA-v992-jpvq-942p

CVSS3: 6.5

github

больше 3 лет назад

EPSS

Процентиль: 68%

0.00572

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476