Vulnerability Details : CVE-2022-3809
A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212666 is the identifier assigned to this vulnerability.
Vulnerability category: Denial of service
Products affected by CVE-2022-3809
- cpe:2.3:a:axiosys:bento4:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-3809
0.12%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 46 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-3809
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
2.8
|
1.4
|
VulDB | |
|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
2.8
|
3.6
|
NIST |
CWE ids for CVE-2022-3809
-
The product does not release or incorrectly releases a resource before it is made available for re-use.Assigned by: cna@vuldb.com (Primary)
References for CVE-2022-3809
-
https://vuldb.com/?id.212666
CVE-2022-3809 | Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of servicePermissions Required;Third Party Advisory
-
https://github.com/axiomatic-systems/Bento4/issues/779
There are some vulnerabilities in Bento4 · Issue #779 · axiomatic-systems/Bento4 · GitHubExploit;Issue Tracking;Third Party Advisory
-
https://github.com/axiomatic-systems/Bento4/files/9653209/poc_Bento4.zip
Exploit;Third Party Advisory
Jump to