CVE-2016-10190 Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negat...
CriticalCVSS 9.8
EPSS 8.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ffmpeg(Debian:12) | < 7:3.2.2-1 | 7:3.2.2-1 |
| debian/ffmpeg(Debian:13) | < 7:3.2.2-1 | 7:3.2.2-1 |
| debian/ffmpeg(Debian:14) | < 7:3.2.2-1 | 7:3.2.2-1 |
| ffmpeg/ffmpeg | <= 2.8.9 | No fix listed |
| ffmpeg/ffmpeg | = 3.0 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.1 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.2 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.3 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.4 | No fix listed |
| ffmpeg/ffmpeg | = 3.1 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.1 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.2 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.3 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.4 | No fix listed |
| ffmpeg/ffmpeg | = 3.1.5 | No fix listed |
| ffmpeg/ffmpeg | = 3.2 | No fix listed |
| ffmpeg/ffmpeg | = 3.2.1 | No fix listed |
| alpine/ffmpeg(Alpine:v3.3) | < 2.8.11-r0 | 2.8.11-r0 |
| alpine/ffmpeg(Alpine:v3.4) | < 3.0.7-r0 | 3.0.7-r0 |
References
- Debian Security Tracker CVE-2016-10190 vendor-advisory
- [oss-security] 20170201 CVE Request: ffmpeg remote exploitaion results code execution mailing-list patch third-party-advisory
- [oss-security] 20170202 Re: CVE Request: ffmpeg remote exploitaion results code execution mailing-list patch third-party-advisory
- 95986 vdb-entry
- ffmpeg.org release-notes vendor-advisory
- github.com
- [debian-lts-announce] 20181220 [SECURITY] [DLA 1611-1] libav security update mailing-list
- trac.ffmpeg.org
- security.alpinelinux.org vendor-advisory