CVE-2016-6164 Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors i...
CriticalCVSS 9.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ffmpeg(Debian:12) | < 7:3.1.1-1 | 7:3.1.1-1 |
| debian/ffmpeg(Debian:13) | < 7:3.1.1-1 | 7:3.1.1-1 |
| debian/ffmpeg(Debian:14) | < 7:3.1.1-1 | 7:3.1.1-1 |
| ffmpeg/ffmpeg | <= 2.8.7 | No fix listed |
| ffmpeg/ffmpeg | = 3.0 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.1 | No fix listed |
| ffmpeg/ffmpeg | = 3.0.2 | No fix listed |
| ffmpeg/ffmpeg | = 3.1 | No fix listed |
| alpine/ffmpeg(Alpine:v3.3) | < 2.8.11-r0 | 2.8.11-r0 |
| alpine/ffmpeg(Alpine:v3.4) | < 3.0.7-r0 | 3.0.7-r0 |
References
- Debian Security Tracker CVE-2016-6164 vendor-advisory
- git.videolan.org
- 95862 vdb-entry
- www.ffmpeg.org vendor-advisory
- security.alpinelinux.org vendor-advisory