Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service
CVE-2022-3809

4.3MEDIUM

Key Information:

Vendor

Axiomatic

Status
Bento4
Vendor
CVE Published:
2 November 2022

What is CVE-2022-3809?

A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212666 is the identifier assigned to this vulnerability.

Affected Version(s)

Bento4

References

https://github.com/axiomatic-systems/Bento4/issues/779
https://github.com/axiomatic-systems/Bento4/files/9653209...
https://vuldb.com/?id.212666

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.