Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom.
References
| Link | Resource |
|---|---|
| http://www.debian.org/security/2017/dsa-3800 | |
| http://www.nemux.org/2016/02/23/libquicktime-1-2-4/ | Exploit Technical Description Third Party Advisory |
| http://www.securityfocus.com/bid/95880 | Third Party Advisory VDB Entry |
| https://packetstormsecurity.com/files/135899/libquicktime-1.2.4-Integer-Overflow.html | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/39487/ | |
| http://www.debian.org/security/2017/dsa-3800 | |
| http://www.nemux.org/2016/02/23/libquicktime-1-2-4/ | Exploit Technical Description Third Party Advisory |
| http://www.securityfocus.com/bid/95880 | Third Party Advisory VDB Entry |
| https://packetstormsecurity.com/files/135899/libquicktime-1.2.4-Integer-Overflow.html | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/39487/ |
Configurations
History
21 Nov 2024, 02:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.debian.org/security/2017/dsa-3800 - | |
| References | () http://www.nemux.org/2016/02/23/libquicktime-1-2-4/ - Exploit, Technical Description, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/95880 - Third Party Advisory, VDB Entry | |
| References | () https://packetstormsecurity.com/files/135899/libquicktime-1.2.4-Integer-Overflow.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://www.exploit-db.com/exploits/39487/ - |
Information
Published : 2017-01-30 22:59
Updated : 2024-11-21 02:48
NVD link : CVE-2016-2399
Mitre link : CVE-2016-2399
CVE.ORG link : CVE-2016-2399
JSON object : View
Products Affected
libquicktime
- libquicktime
CWE
CWE-190
Integer Overflow or Wraparound