CVE-2017-14638

Description

References

• blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsettype-ap4atom-h · Exploit
• axiomatic-systems/Bento4 commit be7185f · Patch
• axiomatic-systems/Bento4 · Exploit

bento4의 다른 취약점

• CVE-2017-14647높음 8.8A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnera…
• CVE-2017-14645보통 6.5A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnera…
• CVE-2017-14644높음 8.8A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, …
• CVE-2017-14643보통 6.5The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based bu…
• CVE-2017-14642보통 6.5A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fau…