CVE-2018-0429

ALTO 7.8CVE-2018-0429 · Published 09/08/2018 · updated 17/06/2026

In breve

CVE-2018-0429 è una vulnerabilità ALTO (CVSS 7.8) che riguarda thor video codec (cisco).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.50%, superiore al 42.8% delle vulnerabilità.
Correzione: aggiornare a 2018-8-8 o successiva.

Package	Affected versions	Patched versions
thor video codec cisco	`< 2018-8-8`	`2018-8-8`

Description

Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows local users to cause a denial of service (segmentation fault) and execute arbitrary code via a crafted non-conformant Thor bitstream.

References

securityfocus.com/bid/105059 · Third Party Advisory
cisco/thor commit 18de8f9 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free