FFmpeg CVE-2017-7866 Stack Buffer Overflow Vulnerability

FFmpeg is prone to a stack-based buffer overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition.

Information

Bugtraq ID: 97664
Class: Boundary Condition Error
CVE: CVE-2017-7866

Remote: Yes
Local: No
Published: Apr 14 2017 12:00AM
Updated: Apr 14 2017 07:05PM
Credit: Unknown.
Vulnerable: FFmpeg FFmpeg 0

Not Vulnerable:

References:

• avcodec/pngdec: Fix off by 1 size in decode_zbuf() (FFmpeg)
  
• FFmpeg Homepage (FFmpeg)
  
• ffmpeg: Stack-buffer-overflow in decode_zbuf (chromium.org)
  

Source: www.securityfocus.com