The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service (overflow, insufficient memory allocation, and segmentation fault) or possibly have unspecified other impact via a crafted mp4 file.
oryginał ENCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HMp4v2 Project Mp4v2
APPMp4V2 Project≤ 2.0.0
Powiązane podatności
mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cpp
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4Stri...
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src...
mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated ...
mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.