Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-7339

Опубликовано: 23 фев. 2018
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mp4v2_project:mp4v2:*:*:*:*:*:*:*:*
Версия до 2.0.0 (включая)

EPSS

Процентиль: 63%
0.00444
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 8 лет назад

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file.

CVSS3: 8.8
debian
почти 8 лет назад

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Ent ...

CVSS3: 8.8
github
больше 3 лет назад

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file.

EPSS

Процентиль: 63%
0.00444
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119