CVE-2016-3062

The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memo...

Original description

The description as published by the source.

The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via the entries value in a dref box in an MP4 file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2016-3062 ffmpeg Fixed in: 7:2.4.1-1

References

advisory lists.opensuse.org
advisory debian.org
advisory libav.org
advisory security.gentoo.org
patch github.com
report bugzilla.libav.org
web ffmpeg.org
web git.libav.org