PT-2023-16992 · Mp4V2 · Mp4V2

10Cksyiqiyinhangzhoutechnology · Publicado 2023-03-17 · Atualizado 2024-05-17 · CVE-2023-1450

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MP4v2 version 2.1.2

Description A problematic issue affects the DumpTrack function of the file mp4trackdump.cpp, leading to denial of service. The attack must be approached locally.

Recommendations For MP4v2 version 2.1.2, consider disabling the DumpTrack function as a temporary workaround until a patch is available.

Exploit

Correção

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

CVE-2023-1450

Produtos afetados

Mp4V2

Referências · 11

• 🔥 https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc/blob/main/id_000005%2Csig_08%2Csrc_000166%2B000357%2Ctime_3137250%2Cexecs_3545598%2Cop_splice%2Crep_16 · Exploit
• 🔥 https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc · Exploit
• https://ubuntu.com/security/CVE-2023-1450 · Aviso do Fabricante
• https://t.me/cvenotify/46369 · Publicação no Telegram
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-1450 · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/9510 · Publicação no Telegram
• https://vuldb.com/?id.223295 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-1450 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1450 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-1450 · Nota de Segurança
• https://vuldb.com/?ctiid.223295 · Nota