Bento4 Core/Ap4SampleEntry.cpp File Heap Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer overflow vulnerability exists in AP4VisualSampleEntry::ReadFields in the Core/Ap4SampleEntry.cpp file in Bento4 version 1.5.0-617. A remote attacker could exploit this vulnerability to cause a denial of service ...

UBUNTU-CVE-2017-14639

AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service application crash or possibly unspecified other impact...

PT-2017-13608

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description A heap-based buffer overflow was discovered in the AP4 VisualSampleEntry::ReadFields function in Core/Ap4SampleEntry.cpp. This issue causes an out-of-bounds write, potentially leading to remote denial of...

PT-2017-13600

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.0-617 Description The issue is caused by incorrect character data types used in the AP4 VisualSampleEntry::ReadFields function in Core/Ap4SampleEntry.cpp. This leads to a stack-based buffer underflow and out-of-bounds write,...