CVE-2017-14642

概要

参考情報

• blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_stdcfilebytestreamreadpartial-ap4stdcfilebytestream-cpp · Exploit
• axiomatic-systems/Bento4 commit 22192de · Patch
• axiomatic-systems/Bento4 · Exploit

bento4 のその他の脆弱性

• CVE-2017-14647高 8.8A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnera…
• CVE-2017-14645中 6.5A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnera…
• CVE-2017-14644高 8.8A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, …
• CVE-2017-14643中 6.5The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based bu…
• CVE-2017-14641中 6.5A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerabili…