CVE-2017-14260
HighSummary
In the SDK in Bento4 version 1.5.0-616, there is a memory access violation vulnerability in the AP4_StssAtom class. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.
Risk Assessment
The organization may be exposed to arbitrary code execution, potentially leading to data loss or system compromise.
Recommendation
It is recommended to update the Bento4 SDK to the latest version to mitigate this vulnerability and to avoid opening untrusted .MP4 files.
Other vulnerabilities in Bento4 SDK 1.5.0-616
See all- CVE-2017-14261High
The SDK in Bento4 version 1.5.0-616 has a Read Memory Access Violation vulnerability in the AP4_StszAtom class. This vulnerability can be exploited by opening a crafted .MP4 file.
- CVE-2017-14259High
The SDK in Bento4 version 1.5.0-616 has a memory access violation vulnerability in the AP4_StscAtom class. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.
- CVE-2017-14258High
The SDK in Bento4 version 1.5.0-616 has a Write Memory Access Violation vulnerability in the SetItemCount function in the Core/Ap4StscAtom.h file. This vulnerability can be exploited to execute arbitrary code by opening a crafted .MP4 file.
- CVE-2017-14257High
The SDK in Bento4 version 1.5.0-616 has a Read Memory Access Violation vulnerability in the AP4_AtomSampleTable::GetSample function. This vulnerability can be exploited by opening a crafted .MP4 file.
Original NVD description (English source)
In the SDK in Bento4 1.5.0-616, the AP4_StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this vulnerability and possibly execute arbitrary code by opening a crafted .MP4 file.