CVE-2016-2327
Gentoo Linux Security Advisory 201606-09
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .avi file, related to the apng_encode_frame and encode_apng functions.
libavcodec/pngenc.c en FFmpeg en versiones anteriores a 2.8.5 utiliza tamaños de línea incorrectos en ciertos cálculos de fila, lo que podría permitir a atacantes remotos provocar una denegación de servicio (acceso al array fuera de rango) o posiblemente tener otro impacto no especificado a través de un archivo .avi manipulado, relacionado con las funciones apng_encode_frame y encode_apng.
Multiple vulnerabilities have been found in FFmpeg, the worst of which could lead to arbitrary code execution or Denial of Service condition. Versions less than 2.8.6 are affected.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-02-11 CVE Reserved
- 2016-02-12 CVE Published
- 2024-08-05 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (4)
URL | Tag | Source |
---|---|---|
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7ec9c5ce8a753175244da971fed9f1e25aef7971 | X_refsource_confirm | |
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8f4c3e4b92212d98f5b9ca2dee13e076effe9589 | X_refsource_confirm | |
http://www.securitytracker.com/id/1035010 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://security.gentoo.org/glsa/201606-09 | 2023-11-07 |