CVE-2017-14259: Buffer Overflow
Published Sep 11, 2017
·Updated
In the SDK in Bento4 1.5.0-616, the AP4StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.
Affected Software
1 affected component
Bento4 Bento4=1.5.0-616
Event History
Sep 11, 2017
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14259?
CVE-2017-14259 is classified as a high severity vulnerability due to the potential for arbitrary code execution.
2
How do I fix CVE-2017-14259?
To fix CVE-2017-14259, update to the latest version of Bento4 that addresses this vulnerability.
3
What kind of attack can exploit CVE-2017-14259?
CVE-2017-14259 can be exploited by opening a specially crafted .MP4 file that triggers the write memory access violation.
4
Which versions of Bento4 are affected by CVE-2017-14259?
CVE-2017-14259 affects Bento4 version 1.5.0-616.
5
What component of Bento4 is vulnerable in CVE-2017-14259?
The vulnerability in CVE-2017-14259 is found in the AP4_StscAtom class within Ap4StscAtom.cpp.