Integer overflow in ffmpeg.sourceforge.net FFmpeg

1) Integer overflow

EUVDB-ID: #VU32152

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2016-6164

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size.

Mitigation

Install update from vendor's website.

Vulnerable software versions

FFmpeg: 3.0.0 - 3.0.2

CPE2.3

• cpe:2.3:a:ffmpeg_sourceforge_net:ffmpeg:3.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:ffmpeg_sourceforge_net:ffmpeg:3.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ffmpeg_sourceforge_net:ffmpeg:3.0.2:*:*:*:*:*:*:*

External links

https://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=8a3221cc67a516dfc1700bdae3566ec52c7ee823
https://www.securityfocus.com/bid/95862
https://www.ffmpeg.org/security.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.