PT-2017-10359
CVE-2016-9824
·
Published
2017-03-01
·
Updated
2017-03-03
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
libav version 11.8
Description
The issue is related to an integer overflow in the libswscale/x86/swscale.c component of libav, which can be triggered by a crafted file. This can cause a denial of service, resulting in a crash.
Recommendations
For libav version 11.8, update to a newer version that contains a fix for this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾