CVE-2017-9616

In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/file-mp4.c.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-06-14

Last modified

2024-08-05

Weaknesses

CWE-674

Affected products

• Wireshark (Wireshark)

References

• http://www.securityfocus.com/bid/99085
• http://www.securitytracker.com/id/1038706
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13777