CVE-2018-14445

Опубликовано: 20 июл. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file.

Ссылки

http://hac425.unaux.com/index.php/archives/62/
Not Applicable
Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/289
Exploit
Issue Tracking
Third Party Advisory
http://hac425.unaux.com/index.php/archives/62/
Not Applicable
Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/289
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:axiosys:bento4:1.5.1-624:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00333

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2018-14445

CVSS3: 6.5

ubuntu

больше 7 лет назад

In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file.

GHSA-hm76-pcx8-wgrm

CVSS3: 6.5

github

больше 3 лет назад

In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file.

EPSS

Процентиль: 56%

0.00333

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835