CVE-2017-14643

概要

参考情報

• blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bytestouint32be-ap4utils-h · Exploit
• axiomatic-systems/Bento4 commit 5eb8cf8 · Patch
• axiomatic-systems/Bento4 · Exploit

bento4 のその他の脆弱性

• CVE-2017-14647高 8.8A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnera…
• CVE-2017-14645中 6.5A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnera…
• CVE-2017-14644高 8.8A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, …
• CVE-2017-14642中 6.5A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fau…
• CVE-2017-14641中 6.5A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerabili…