CVE-2016-6671

Опубликовано: 23 дек. 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted SWF file.

Ссылки

http://www.openwall.com/lists/oss-security/2016/08/12/6
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/92447
http://www.openwall.com/lists/oss-security/2016/08/12/6
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/92447

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*

Версия до 3.1.1 (включая)

EPSS

Процентиль: 68%

0.0058

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2016-6671

CVSS3: 7.8

ubuntu

около 9 лет назад

The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted SWF file.

CVE-2016-6671

CVSS3: 7.8

debian

около 9 лет назад

The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 ...

GHSA-c65m-5vxj-2r25

CVSS3: 7.8

github

больше 3 лет назад

The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted SWF file.

EPSS

Процентиль: 68%

0.0058

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119