PT-2017-19324 · FFmpeg · Ffmpeg
Publicado
2017-06-28
·
Atualizado
2018-01-01
·
CVE-2017-9991
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
FFmpeg versions prior to 2.8.12
FFmpeg versions 3.0.x prior to 3.0.8
FFmpeg versions 3.1.x prior to 3.1.8
FFmpeg versions 3.2.x prior to 3.2.5
FFmpeg versions 3.3.x prior to 3.3.1
Description
A heap-based buffer overflow issue exists in the
xwd decode frame function, located in libavcodec/xwddec.c, allowing remote attackers to cause a denial of service, potentially leading to an application crash, or possibly having other unspecified impacts via a crafted file.Recommendations
For FFmpeg versions prior to 2.8.12, update to version 2.8.12 or later.
For FFmpeg versions 3.0.x prior to 3.0.8, update to version 3.0.8 or later.
For FFmpeg versions 3.1.x prior to 3.1.8, update to version 3.1.8 or later.
For FFmpeg versions 3.2.x prior to 3.2.5, update to version 3.2.5 or later.
For FFmpeg versions 3.3.x prior to 3.3.1, update to version 3.3.1 or later.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ffmpeg