USN-4545-1

Dashboard / Vulnerabilities / USN-4545-1

USN-4545-1

Summary: libquicktime vulnerabilities

Details: It was discovered that libquicktime incorrectly handled certain malformed MP4 files. If a user were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause a denial of service (resource exhaustion). (CVE-2017-9122) It was discovered that libquicktime incorrectly handled certain malformed MP4 files. If a user were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause libquicktime to crash, resulting in a denial of service. (CVE-2017-9123, CVE-2017-9124, CVE-2017-9126, CVE-2017-9127, CVE-2017-9128) It was discovered that libquicktime incorrectly handled certain malformed MP4 files. If a user were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause a denial of service. (CVE-2017-9125)

References: https://ubuntu.com/security/notices/USN-4545-1, https://ubuntu.com/security/CVE-2017-9122, https://ubuntu.com/security/CVE-2017-9123, https://ubuntu.com/security/CVE-2017-9124, https://ubuntu.com/security/CVE-2017-9125, https://ubuntu.com/security/CVE-2017-9126, https://ubuntu.com/security/CVE-2017-9127, https://ubuntu.com/security/CVE-2017-9128