CVE-2017-12476

概要

参考情報

• drive.google.com/open · Third Party Advisory
• drive.google.com/open · Third Party Advisory
• axiomatic-systems/Bento4 commit 4d3f0be · Patch

bento4 のその他の脆弱性

• CVE-2017-14647高 8.8A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnera…
• CVE-2017-14645中 6.5A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnera…
• CVE-2017-14644高 8.8A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, …
• CVE-2017-14643中 6.5The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based bu…
• CVE-2017-14642中 6.5A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fau…