CVE-2017-9126

The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
References
Link Resource
https://usn.ubuntu.com/4545-1/
https://www.exploit-db.com/exploits/42148/ Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:libquicktime:libquicktime:1.2.4:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-06-12 06:29

Updated : 2023-12-10 12:15


NVD link : CVE-2017-9126

Mitre link : CVE-2017-9126

CVE.ORG link : CVE-2017-9126


JSON object : View

Products Affected

libquicktime

  • libquicktime
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer