CVE

Id
93740  
CVE No.
CVE-2016-6920  
Status
Candidate  
Description
Heap-based buffer overflow in the decode_block function in libavcodec/exr.c in FFmpeg before 3.1.3 allows remote attackers to cause a denial of service (application crash) via vectors involving tile positions.  
Phase
Assigned (20160823)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794459 93740 CVE-2016-6920 BUGTRAQ:20160907 CVE-2016-6920 ffmpeg exr file Heap Overflow  View
794460 93740 CVE-2016-6920 URL:http://www.securityfocus.com/archive/1/archive/1/539368/100/0/threaded  View
794461 93740 CVE-2016-6920 MISC:http://packetstormsecurity.com/files/138618/ffmpeg-3.1.2-Heap-Overflow.html  View
794462 93740 CVE-2016-6920 CONFIRM:http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=79f52a0dbd484aad111e4bf4a4f7047c7ceb6137  View
794463 93740 CVE-2016-6920 CONFIRM:https://www.ffmpeg.org/security.html  View
794464 93740 CVE-2016-6920 BID:92664  View
794465 93740 CVE-2016-6920 URL:http://www.securityfocus.com/bid/92664  View
794466 93740 CVE-2016-6920 BID:92790  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5085 JVNDB-2016-005858 複数の Microsoft 製品におけるプロセスメモリから重要な情報を取得される脆弱性 複数の Microsoft 製品には、プロセスメモリから重要な情報を取得される、またはサービス運用妨害 (境界外読み取り) 状態にされる脆弱性が存在します。 CVE-2016-7233 93740 4.3 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005858.html  View