Vulnerability Description
Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.
CVSS Score
7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ogg Video Tools Project | Ogg Video Tools | 0.9.1 |
Related Weaknesses (CWE)
References
- https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-and-heaBroken Link
- https://sourceforge.net/p/oggvideotools/bugs/9/ExploitThird Party Advisory
- https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-and-heaBroken Link
- https://sourceforge.net/p/oggvideotools/bugs/9/ExploitThird Party Advisory
FAQ
What is CVE-2020-21724?
CVE-2020-21724 is a vulnerability with a CVSS score of 7.8 (HIGH). Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.
How severe is CVE-2020-21724?
CVE-2020-21724 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-21724?
Check the references section above for vendor advisories and patch information. Affected products include: Ogg Video Tools Project Ogg Video Tools.