mp4tools aacplusenc Denial of Service Vulnerability

mp4tools aacplusenc is a tool for encoding video and audio for mp4 format files. A security vulnerability exists in DeleteBitBuffer in the libbitbuf/bitbuffer.c file in version 0.17.5 of mp4tools aacplusenc. A remote attacker can exploit this vulnerability to cause a denial of service null pointe...

CVE-2017-14181

DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service invalid memory write, SEGV on unknown address 0x000000000030, and application crash or possibly have unspecified other impact via a crafted .wav file, aka a NULL pointer...

CVE-2017-14181

DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service invalid memory write, SEGV on unknown address 0x000000000030, and application crash or possibly have unspecified other impact via a crafted .wav file, aka a NULL pointer...

Null pointer dereference

DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service invalid memory write, SEGV on unknown address 0x000000000030, and application crash or possibly have unspecified other impact via a crafted .wav file, aka a NULL pointer...

CVE-2017-14181

DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service invalid memory write, SEGV on unknown address 0x000000000030, and application crash or possibly have unspecified other impact via a crafted .wav file, aka a NULL pointer...

CVE-2017-14181

CVE-2017-14181 affects mp4tools aacplusenc 0.17.5: DeleteBitBuffer in libbitbuf/bitbuffer.c can be triggered by a crafted .wav file to cause a denial of service via an invalid memory write and a NULL pointer dereference, leading to a crash (SEGV on an unknown address). Connected sources corrobora...

aacplusenc -- denial of service

Gentoo developers report: DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service invalid memory write, SEGV on unknown address 0x000000000030, and application crash or possibly have unspecified other impact via a crafted .wav...