PT-2016-1476 · FFmpeg · Ffmpeg
Publicado
2016-02-12
·
Atualizado
2017-07-01
·
CVE-2016-2326
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
FFmpeg versions prior to 2.8.5
Description
The issue is caused by an integer overflow in the
asf write packet function in libavformat/asfenc.c. This can be exploited by a remote attacker using a specially crafted PTS value in a .mov file, potentially leading to a denial of service or other unspecified impacts.Recommendations
For versions prior to 2.8.5, update to version 2.8.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of .mov files or limiting access to the
asf write packet function until a patch is applied.Correção
DoS
Integer Overflow
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Ffmpeg