CVE-2018-0429

Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows local users to cause a denial of service (segmentation fault) and execute arbitrary code via a crafted non-conformant Thor bitstream.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2018-08-09

Last modified

2024-11-26

Weaknesses

CWE-119

Affected products

• Thor Video Codec (Cisco)

References

• http://www.securityfocus.com/bid/105059
• https://github.com/cisco/thor/commit/18de8f9f0762c3a542b1122589edb8af859d9813