Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-9719

Опубликовано: 19 сент. 2019
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a vulnerability is provided” and only “a generic warning from a static code analysis” is provided

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*
Версия до 12.3 (включая)

EPSS

Процентиль: 66%
0.00516
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 6 лет назад

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a vulnerability is provided” and only “a generic warning from a static code analysis” is provided

CVSS3: 8.8
debian
больше 6 лет назад

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 al ...

CVSS3: 8.8
github
больше 3 лет назад

A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.

EPSS

Процентиль: 66%
0.00516
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787