PT-2017-10356

CVE-2016-9821

·

Published

2017-03-01

·

Updated

2017-11-04

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions libav version 11.8
Description The issue is related to an integer overflow in the libavcodec/mpegvideo parser.c file of libav, which can be exploited by remote attackers to cause a denial of service (crash) by providing a crafted file.
Recommendations For libav version 11.8, update to a version that fixes the integer overflow issue in libavcodec/mpegvideo parser.c to prevent remote attackers from causing a denial of service.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
DLA-791-1
DSA-3833-1
Found an issue in the description? Have something to add? Feel free to write us 👾