The AP4_Processor::Process function in Core/Ap4Processor.cpp in Bento4 mp4encrypt before 1.5.0-616 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
References
Link | Resource |
---|---|
https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s | Third Party Advisory |
https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc | Third Party Advisory |
https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e | Patch Third Party Advisory |
Configurations
History
No history.
Information
Published : 2017-09-06 08:29
Updated : 2024-02-28 16:04
NVD link : CVE-2017-12475
Mitre link : CVE-2017-12475
CVE.ORG link : CVE-2017-12475
JSON object : View
Products Affected
axiosys
- bento4
CWE
CWE-476
NULL Pointer Dereference