PT-2016-3052
CVE-2016-5199
·
تاريخ النشر
2016-11-09
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 54.0.2840.98 for Mac
Google Chrome versions prior to 54.0.2840.99 for Windows
Google Chrome versions prior to 54.0.2840.100 for Linux
Google Chrome versions prior to 55.0.2883.84 for Android
Description
The issue is caused by an off by one error resulting in an allocation of zero size in FFmpeg, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a crafted video file, causing a denial of service.
Recommendations
For Google Chrome versions prior to 54.0.2840.98 for Mac, update to version 54.0.2840.98 or later.
For Google Chrome versions prior to 54.0.2840.99 for Windows, update to version 54.0.2840.99 or later.
For Google Chrome versions prior to 54.0.2840.100 for Linux, update to version 54.0.2840.100 or later.
For Google Chrome versions prior to 55.0.2883.84 for Android, update to version 55.0.2883.84 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾