Vulnerability Name: | CVE-2008-3162 (CCN-43652) | ||||||||||||||||||||
Assigned: | 2008-06-26 | ||||||||||||||||||||
Published: | 2008-06-26 | ||||||||||||||||||||
Updated: | 2018-10-30 | ||||||||||||||||||||
Summary: | Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted STR file that interleaves audio and video sectors. | ||||||||||||||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||
CVSS v2 Severity: | 9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C) 6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||
Vulnerability Type: | CWE-119 | ||||||||||||||||||||
Vulnerability Consequences: | Gain Access | ||||||||||||||||||||
References: | Source: CONFIRM Type: UNKNOWN http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=489965 Source: MITRE Type: CNA CVE-2008-3162 Source: CCN Type: SA30994 FFmpeg libavformat "str_read_packet()" Buffer Overflow Source: SECUNIA Type: Vendor Advisory 30994 Source: SECUNIA Type: UNKNOWN 31268 Source: SECUNIA Type: UNKNOWN 34385 Source: SECUNIA Type: UNKNOWN 34905 Source: GENTOO Type: UNKNOWN GLSA-200903-33 Source: CCN Type: FFmpeg Web page Revision 13993 Source: CONFIRM Type: UNKNOWN http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=13993 Source: DEBIAN Type: UNKNOWN DSA-1781 Source: DEBIAN Type: DSA-1781 ffmpeg-debian -- several vulnerabilities Source: CCN Type: GLSA-200901-07 MPlayer: Multiple vulnerabilities Source: MANDRIVA Type: UNKNOWN MDVSA-2008:157 Source: MLIST Type: UNKNOWN [oss-security] 20080710 CVE id request: libavformat Source: MLIST Type: UNKNOWN [oss-security] 20080716 Re: CVE id request: libavformat Source: CCN Type: OSVDB ID: 46842 FFmpeg libavformat/psxstr.c libavformat str_read_packet() Function STR File Handling Overflow Source: BID Type: UNKNOWN 30154 Source: CCN Type: BID-30154 FFmpeg libavformat 'psxstr.c' STR Data Heap Based Buffer Overflow Vulnerability Source: CCN Type: USN-630-1 ffmpeg vulnerability Source: UBUNTU Type: UNKNOWN USN-630-1 Source: VUPEN Type: UNKNOWN ADV-2008-2031 Source: XF Type: UNKNOWN ffmpeg-strreadpacket-bo(43652) Source: CCN Type: FFmpge Issue311 Crash demuxing STR with badly interleaved audio Source: CONFIRM Type: UNKNOWN https://roundup.mplayerhq.hu/roundup/ffmpeg/issue311 | ||||||||||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||||||||||
Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
BACK |