CVE-2022-3757: Exiv2 QuickTime Video quicktimevideo.cpp decodeBlock Pufferüberlauf [False-Positive]

1	28

exploit_price_0day	2
source_cve_nvd_summary	1
source_cve_assigned	1
advisory_identifier	1
cna_response_summary	1

90%	32
50%	10
70%	3
100%	3

90%

50%

70%

100%

90%	32
80%	10
70%	3
100%	3

90%

80%

70%

100%

ID	Übermittelt	Benutzer	Feld	Änderung	Bemerkung	Akzeptiert	Status	C
13310150	26.11.2022	VulD...	cve_nvd_summary	A vulnerability was found in Exiv2. It has been declared as critical. Affected by this vulnerability is the function QuickTimeVideo::decodeBlock of the file quicktimevideo.cpp of the component QuickTime Video Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The name of the patch is d3651fdbd352cbaf259f89abf7557da343339378. It is recommended to apply a patch to fix this issue. The identifier VDB-212497 was assigned to this vulnerability.	cvedetails.com	26.11.2022	akzeptiert	70
13310149	26.11.2022	VulD...	cve_assigned	1666994400 (29.10.2022)	cve.mitre.org	26.11.2022	akzeptiert	70
13310148	26.11.2022	VulD...	identifier	d3651fdbd352cbaf259f89abf7557da343339378	cve.mitre.org	26.11.2022	akzeptiert	70
13292670	21.11.2022	VulD...	price_0day		see exploit price documentation	21.11.2022	akzeptiert	90
13292669	21.11.2022	VulD...	response_summary	Issue was introduced on the main (dev) branch and fixed shortly afterwards, so none of the official releases were ever affected.		21.11.2022	akzeptiert	100
13292668	21.11.2022	VulD...	falsepositive	1		21.11.2022	akzeptiert	100
13292667	21.11.2022	VulD...	disputed	1		21.11.2022	akzeptiert	100
13198250	29.10.2022	VulD...	price_0day	$0-$5k	see exploit price documentation	29.10.2022	akzeptiert	90
13198249	29.10.2022	VulD...	cvss3_meta_tempscore	6.0	see CVSS documentation	29.10.2022	akzeptiert	90
13198248	29.10.2022	VulD...	cvss3_meta_basescore	6.3	see CVSS documentation	29.10.2022	akzeptiert	90
13198247	29.10.2022	VulD...	cvss3_vuldb_tempscore	6.0	see CVSS documentation	29.10.2022	akzeptiert	90
13198246	29.10.2022	VulD...	cvss3_vuldb_basescore	6.3	see CVSS documentation	29.10.2022	akzeptiert	90
13198245	29.10.2022	VulD...	cvss2_vuldb_tempscore	6.5	see CVSS documentation	29.10.2022	akzeptiert	90
13198244	29.10.2022	VulD...	cvss2_vuldb_basescore	7.5	see CVSS documentation	29.10.2022	akzeptiert	90
13198243	29.10.2022	VulD...	cvss3_vuldb_e	X	derived from historical data	29.10.2022	akzeptiert	80
13198242	29.10.2022	VulD...	cvss2_vuldb_e	ND	derived from historical data	29.10.2022	akzeptiert	80
13198241	29.10.2022	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	29.10.2022	akzeptiert	80
13198240	29.10.2022	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	29.10.2022	akzeptiert	80
13198239	29.10.2022	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	29.10.2022	akzeptiert	80
13198238	29.10.2022	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	29.10.2022	akzeptiert	80

Übermittelt

Benutzer

Feld

Änderung

Bemerkung

Akzeptiert

Status

A vulnerability was found in Exiv2. It has been declared as critical. Affected by this vulnerability is the function QuickTimeVideo::decodeBlock of the file quicktimevideo.cpp of the component QuickTime Video Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The name of the patch is d3651fdbd352cbaf259f89abf7557da343339378. It is recommended to apply a patch to fix this issue. The identifier VDB-212497 was assigned to this vulnerability.