PT-2017-14144 · FFmpeg+1 · Ffmpeg+1

Publicado 2017-10-28 · Atualizado 2024-06-15 · CVE-2017-15672

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.4 through 3.3.4

Description The issue concerns the read header function in libavcodec/ffv1dec.c, which allows remote attackers to trigger an out-of-bounds read via a crafted MP4 file. This can lead to an unspecified impact.

Recommendations For FFmpeg versions 2.4 through 3.3.4, consider updating to a newer version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2017-2526

CVE-2017-15672

DLA-1630-1

DSA-4049-1

OPENSUSE-SU-2018:0470-1

OPENSUSE-SU-2018:0476-1

OPENSUSE-SU-2024:10754-1

Produtos afetados

Alt Linux

Ffmpeg

Referências · 104

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-9993.md · Exploit
• https://github.com/FFmpeg/FFmpeg/commit/d893253fcd93d11258e98857175e93be7d158708 · Nota
• https://bdu.fstec.ru/vul/2017-02092 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-14054 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15672 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-15186 · Nota
• https://suse.com/security/cve/CVE-2017-14171 · Nota
• https://bugzilla.suse.com/1064577 · Nota
• https://suse.com/security/cve/CVE-2017-14059 · Nota
• https://bugzilla.libav.org/show_bug.cgi?id=1100 · Nota
• https://suse.com/security/cve/CVE-2017-7866 · Nota
• https://bdu.fstec.ru/vul/2024-09060 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-7859 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9993 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-14223 · Nota