PT-2017-9031 · FFmpeg · Libav

Agostino Sarubbo + 1 · Publicado 2017-02-15 · Atualizado 2017-02-17 · CVE-2016-6832

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libav versions prior to 11.4

Description The issue is related to a heap-based buffer overflow in the ff audio resample function, which can be triggered by vectors related to buffer resizing, potentially causing a denial of service (crash).

Recommendations For versions prior to 11.4, update to version 11.4 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-6832

Produtos afetados

Libav

Referências · 7

• 🔥 http://openwall.com/lists/oss-security/2016/08/18/1 · Exploit
• 🔥 https://bugzilla.libav.org/show_bug.cgi?id=825 · Exploit
• 🔥 https://blogs.gentoo.org/ago/2016/08/07/libav-heap-based-buffer-overflow-in-ff_audio_resample-resample-c · Exploit
• 🔥 http://openwall.com/lists/oss-security/2016/08/13/1 · Exploit
• https://osv.dev/vulnerability/CVE-2016-6832 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6832 · Nota de Segurança
• https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=0ac8ff618c5e6d878c547a8877e714ed728950ce · Nota