PT-2017-13681 · FFmpeg+1 · Ffmpeg+1
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
FFmpeg versions prior to 3.3.4
Description
The issue is related to the handling of empty sprop-parameter-sets values in the sdp parse fmtp config h264 function, which can lead to a denial of service (heap buffer overflow) or possibly have other unspecified impacts. This can be triggered by remote attackers via a crafted sdp file.
Recommendations
For versions prior to 3.3.4, update to version 3.3.4 or later to resolve the issue.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Ffmpeg