CVE-2018-1000100: Buffer Overflow
Published Mar 6, 2018
·Updated
GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avcext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This attack appear to be exploitable via an attacker supplied MP4 file that when run by the victim may result in RCE.
Affected Software
5 affected componentsFixes available
debian/gpac
1.0.1+dfsg1-4+deb11u3
Gpac Project Gpac<=0.7.1
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=18.10
Remediation
Event History
Mar 6, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:29 PM
DescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:43 PM
Description
Feb 20, 2026
Data Sourced
via Ubuntu·03:18 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-1000100?
CVE-2018-1000100 is considered a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2018-1000100?
To fix CVE-2018-1000100, upgrade GPAC to version 1.0.1+dfsg1-4+deb11u3 or later.
3
What software versions are affected by CVE-2018-1000100?
CVE-2018-1000100 affects GPAC versions 0.7.1 and earlier.
4
Can CVE-2018-1000100 be exploited remotely?
Yes, CVE-2018-1000100 can be exploited remotely via a malicious MP4 file supplied by an attacker.
5
What type of vulnerability is CVE-2018-1000100?
CVE-2018-1000100 is a buffer overflow vulnerability that can lead to heap memory modification.