CVE-2017-14259
HighSummary
The SDK in Bento4 version 1.5.0-616 has a memory access violation vulnerability in the AP4_StscAtom class. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.
Risk Assessment
Organizations may be at risk of arbitrary code execution, potentially leading to data loss or system compromise.
Recommendation
It is recommended to update the Bento4 SDK to the latest version to mitigate this vulnerability and to avoid opening untrusted .MP4 files.
Other vulnerabilities in Bento4 SDK 1.5.0-616
See all- CVE-2017-14261High
The SDK in Bento4 version 1.5.0-616 has a Read Memory Access Violation vulnerability in the AP4_StszAtom class. This vulnerability can be exploited by opening a crafted .MP4 file.
- CVE-2017-14260High
In the SDK in Bento4 version 1.5.0-616, there is a memory access violation vulnerability in the AP4_StssAtom class. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.
- CVE-2017-14258High
The SDK in Bento4 version 1.5.0-616 has a Write Memory Access Violation vulnerability in the SetItemCount function in the Core/Ap4StscAtom.h file. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.
- CVE-2017-14257High
The SDK in Bento4 version 1.5.0-616 has a Read Memory Access Violation vulnerability in the AP4_AtomSampleTable::GetSample function. This vulnerability can be exploited by opening a crafted .MP4 file.
Original NVD description (English source)
In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.