Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-89116
HistoryOct 09, 2022 - 12:00 a.m.

Bento4 Ap4File.cpp Denial of Service Vulnerability

2022-10-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
3

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.6.0-639 suffers from a denial of service vulnerability that stems from a null pointer dereference in AP4_File::ParseStream in Core/Ap4File.cpp. An attacker could exploit the vulnerability to cause a denial-of-service attack.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H