CVE-2016-3062
Fixed in a distro release EPSS 4%
The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via the entries value in a dref box in an MP4 file.
Products: libav, ffmpeg, debian_linux, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ffmpeg | 7:2.4.1-1 |
| Debian 13 | ffmpeg | 7:2.4.1-1 |
| Debian 14 | ffmpeg | 7:2.4.1-1 |
| Debian 7 | libav | 6:0.8.17-2+deb7u2 |
| Debian 8 | libav | 6:11.7-1~deb8u1 |
| Ubuntu Pro 14.04 LTS | libav | 6:9.20-0ubuntu0.14.04.1+esm1 |
| openSUSE Tumbleweed | libav-tools | 12.3-1.17 |