Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-6062
HistoryJun 17, 2024 - 12:00 a.m.

CVE-2024-6062

2024-06-1700:00:00
ubuntu.com
ubuntu.com
1
gpac vulnerability
mp4box component
null pointer dereference
local exploit
public disclosure
patch identifier
vdb-268790

1.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.8 Medium

CVSS4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:N

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and
classified as problematic. Affected by this issue is the function
swf_svg_add_iso_sample of the file src/filters/load_text.c of the component
MP4Box. The manipulation leads to null pointer dereference. The attack
needs to be approached locally. The exploit has been disclosed to the
public and may be used. The patch is identified as
31e499d310a48bd17c8b055a0bfe0fe35887a7cd. It is recommended to apply a
patch to fix this issue. VDB-268790 is the identifier assigned to this
vulnerability.

Bugs

1.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.8 Medium

CVSS4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:N

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%