medium6.5Public exploit code
CVE-2017-9125
The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- libquicktime 1.2.4 - Denial of Service2017-06-09 · dos · linux
Impact
The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libquicktime | Libquicktime | Version 1.2.4 |