CVE-2017-14258: Buffer Overflow
Published Sep 11, 2017
·Updated
In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.
Affected Software
1 affected component
Bento4 Bento4=1.5.0-616
Event History
Sep 11, 2017
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14258?
CVE-2017-14258 is considered a high severity vulnerability due to the potential for arbitrary code execution.
2
How do I fix CVE-2017-14258?
To fix CVE-2017-14258, update your Bento4 SDK to a version later than 1.5.0-616.
3
What causes the vulnerability in CVE-2017-14258?
The vulnerability in CVE-2017-14258 is caused by a write memory access violation in the SetItemCount function of the Bento4 SDK.
4
Can CVE-2017-14258 be exploited easily?
Yes, CVE-2017-14258 can be exploited by opening a specially crafted .MP4 file designed to trigger the vulnerability.
5
Which software versions are affected by CVE-2017-14258?
CVE-2017-14258 affects Bento4 version 1.5.0-616.