Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-14403

Опубликовано: 19 июл. 2018
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:techsmith:mp4v2:2.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 63%
0.00448
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-704

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 7 лет назад

MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access.

CVSS3: 9.8
debian
больше 7 лет назад

MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substring ...

CVSS3: 9.8
github
больше 3 лет назад

MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access.

EPSS

Процентиль: 63%
0.00448
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-704