Homepage
About Snyk

Extractor@0.5 vulnerabilities

bindings for GNU libextractor, the metadata extractor

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the Extractor package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Heap-based Buffer Overflow

Extractor is a bindings for GNU libextractor, the metadata extractor

Affected versions of this package are vulnerable to Heap-based Buffer Overflow. Multiple heap-based buffer overflows exist, allowing remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).

How to fix Heap-based Buffer Overflow?

There is no fixed version for Extractor.

[0,)
Go back to all versions of this package