Published: 07/10/2016 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and previous versions allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via a crafted MP3 file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 8.0
libav libav

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library A full list of the changes is available at gitlibavorg/?p=libavgit;a=blob;f=Changelog;hb=refs/tags/v118 For the stable distribution (jessie), these problems have been fixed in version 6:118-1~deb8u1 We recommend that you upg ...

CWE-476 https://bugzilla.libav.org/show_bug.cgi?id=962 https://blogs.gentoo.org/ago/2016/09/17/libav-null-pointer-dereference-in-put_no_rnd_pixels8_xy2_mmx-rnd_template-c/http://www.openwall.com/lists/oss-security/2016/09/16/17 http://www.securityfocus.com/bid/93038 http://www.openwall.com/lists/oss-security/2016/09/17/4 http://www.openwall.com/lists/oss-security/2016/09/17/1 http://www.debian.org/security/2016/dsa-3685 https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=136f55207521f0b03194ef5b55ba70f1635d6aee https://nvd.nist.gov https://www.debian.org/security/./dsa-3685

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-7424

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect