Summaryinfo

A vulnerability was found in FFmpeg 3.3.0/3.3.1. It has been rated as critical. Affected is an unknown function of the file libavcodec/scpr.c. The manipulation of the argument height/width leads to memory corruption. This vulnerability is listed as CVE-2017-9995. The attack must be carried out locally. There is no available exploit. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in FFmpeg 3.3.0/3.3.1 (Multimedia Processing Software) and classified as critical. This issue affects an unknown function of the file libavcodec/scpr.c. The manipulation of the argument height/width with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

The bug was discovered 05/10/2017. The weakness was presented 06/28/2017 (Website). The advisory is shared at securityfocus.com. The identification of this vulnerability is CVE-2017-9995 since 06/28/2017. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available.

The vulnerability was handled as a non-public zero-day exploit for at least 49 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 3.3.2 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 99320†). See VDB-102894, VDB-102892, VDB-102891 and VDB-102890 for similar entries. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Multimedia Processing Software

Name

• FFmpeg

Version

• 3.3.0
• 3.3.1

License

• open-source

Website

• Product: https://ffmpeg.org/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion