CVE-2017-14258
HighSummary
The SDK in Bento4 version 1.5.0-616 has a Write Memory Access Violation vulnerability in the SetItemCount function in the Core/Ap4StscAtom.h file. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.
Risk Assessment
Exploitation of this vulnerability may lead to remote code execution, posing a significant security threat to the organization's systems.
Recommendation
It is recommended to update the Bento4 SDK to the latest version to mitigate this vulnerability and to restrict opening unknown .MP4 files.
Other vulnerabilities in Bento4 SDK 1.5.0-616
See all- CVE-2017-14261High
The SDK in Bento4 version 1.5.0-616 has a Read Memory Access Violation vulnerability in the AP4_StszAtom class. This vulnerability can be exploited by opening a crafted .MP4 file.
- CVE-2017-14260High
In the SDK in Bento4 version 1.5.0-616, there is a memory access violation vulnerability in the AP4_StssAtom class. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.
- CVE-2017-14259High
The SDK in Bento4 version 1.5.0-616 has a memory access violation vulnerability in the AP4_StscAtom class. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.
- CVE-2017-14257High
The SDK in Bento4 version 1.5.0-616 has a Read Memory Access Violation vulnerability in the AP4_AtomSampleTable::GetSample function. This vulnerability can be exploited by opening a crafted .MP4 file.
Original NVD description (English source)
In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.