CVE-2017-9995 in FFmpeg

Resumen (Inglés)

libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2017-06-28

Divulgación

2017-06-28

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
102893	FFmpeg scpr.c desbordamiento de búfer	119	No está definido	Arreglo oficial	CVE-2017-9995

Fuentes

• MITRE
• NVD
• CVE Details