CVE-2017-12475

The AP4_Processor::Process function in Core/Ap4Processor.cpp in Bento4 mp4encrypt before 1.5.0-616 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-09-06

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Bento4 (Axiosys)

References

• https://drive.google.com/open?id=0B6wBkDmxMGMKUjNscThnbTlSZ2s
• https://drive.google.com/open?id=0B9DojFnTUSNGZ1JfNUc1am9pcnc
• https://github.com/axiomatic-systems/Bento4/commit/4d3f0bebd5f8518fd775f671c12bea58c68e814e