CVE-2017-12474

Description

References

• drive.google.com/open · Third Party Advisory
• drive.google.com/open · Third Party Advisory
• axiomatic-systems/Bento4 commit 4d3f0be · Patch

bento4의 다른 취약점

• CVE-2017-14647높음 8.8A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnera…
• CVE-2017-14645보통 6.5A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnera…
• CVE-2017-14644높음 8.8A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, …
• CVE-2017-14643보통 6.5The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based bu…
• CVE-2017-14642보통 6.5A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fau…