PT-2019-18708 · Axiomatic Systems · Bento4

Wcventure · Publicado 2019-02-10 · Atualizado 2020-08-24 · CVE-2019-7698

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627

Description An issue was discovered in the AP4 Array function, which can be triggered by crafted MP4 input, leading to an attempt at excessive memory allocation. This issue is related to a previously known problem.

Recommendations For Bento4 version 1.5.1-627, consider updating to a newer version that addresses this issue, as the current version may be prone to excessive memory allocation attempts when processing crafted MP4 input. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2019-7698

Produtos afetados

Bento4

Referências · 6

• 🔥 https://github.com/axiomatic-systems/Bento4/issues/354 · Exploit
• https://osv.dev/vulnerability/CVE-2019-7698 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7698 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2019-7698 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-7698 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-7698 · Aviso do Fabricante