PT-2017-10356
CVE-2016-9821
·
Published
2017-03-01
·
Updated
2017-11-04
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
libav version 11.8
Description
The issue is related to an integer overflow in the libavcodec/mpegvideo parser.c file of libav, which can be exploited by remote attackers to cause a denial of service (crash) by providing a crafted file.
Recommendations
For libav version 11.8, update to a version that fixes the integer overflow issue in libavcodec/mpegvideo parser.c to prevent remote attackers from causing a denial of service.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾