PT-2016-5349 · Libav+1 · Libav+1

Publicado 2016-06-14 · Atualizado 2024-06-15 · CVE-2016-3062

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.7 FFmpeg versions prior to 0.11

Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via the entries value in a dref box in an MP4 file. This is due to a problem in the mov read dref function in libavformat/mov.c.

Recommendations For Libav versions prior to 11.7, update to version 11.7 or later. For FFmpeg versions prior to 0.11, update to version 0.11 or later.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-3062

DLA-515-1

DSA-3603-1

OPENSUSE-SU-2024:10926-1

Produtos afetados

Ffmpeg

Libav

Referências · 33

• https://github.com/FFmpeg/FFmpeg/commit/689e59b7ffed34eba6159dcc78e87133862e3746 · Correção
• https://osv.dev/vulnerability/DSA-3603-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3062 · Nota de Segurança
• https://suse.com/security/cve/CVE-2012-6618 · Nota
• https://bugzilla.libav.org/show_bug.cgi?id=929 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-5479 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-3062 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-3062 · Nota
• https://suse.com/security/cve/CVE-2013-0852 · Nota
• https://suse.com/security/cve/CVE-2015-3417 · Nota
• https://suse.com/security/cve/CVE-2011-3946 · Nota
• https://cve.org/CVERecord?id=CVE-2016-3062 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-3062 · Nota de Segurança
• https://security-tracker.debian.org/tracker/source-package/libav · Aviso do Fabricante
• https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=7e01d48cfd168c3dfc663f03a3b6a98e0ecba328 · Nota