| Package | Affected versions | Patched versions |
|---|---|---|
| extractor | = 0.5 | |
| libextractor | = 0.5.13 |
Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free