CVE-2017-14055 in FFmpeg

요약 (영어)

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop.

예약하다

2017. 08. 31.

공개

2017. 08. 31.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
106023	FFmpeg mvdec.c mv_read_header 서비스 거부	399	정의되지 않음	공식 수정	CVE-2017-14055