| Package | Affected versions | Patched versions |
|---|---|---|
| nginx | ≥ 1.0.7, ≤ 1.0.14≥ 1.1.3, ≤ 1.1.18 |
Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free