Libav 'libavformat/nsvdec.c' NULL Pointer Dereference Denial of Service Vulnerability
BID:98548
Info
Libav 'libavformat/nsvdec.c' NULL Pointer Dereference Denial of Service Vulnerability
| Bugtraq ID: | 98548 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2017-9051 |
| Remote: | Yes |
| Local: | No |
| Published: | May 18 2017 12:00AM |
| Updated: | May 18 2017 12:00AM |
| Credit: | Marcel Boehme |
| Vulnerable: |
Libav Libav 1.2.1 Libav Libav 0.8.15 Libav Libav 0.8.14 Libav Libav 0.8.12 Libav Libav 0.8.11 Libav Libav 0.8.10 Libav Libav 0.8.7 Libav Libav 0.8.6 Libav Libav 0.8.5 Libav Libav 0.8.3 Libav Libav 0.7.4 Libav Libav 0.6.4 Libav Libav 0.5.7 Libav Libav 0.5.6 Libav Libav 9.9 Libav Libav 9.8 Libav Libav 9.7 Libav Libav 9.11 Libav Libav 9.10 Libav Libav 12.0 Libav Libav 11.9 Libav Libav 11.8 Libav Libav 11.7 Libav Libav 11.5 Libav Libav 11.4 Libav Libav 11.3 Libav Libav 0.8.9 Libav Libav 0.8.8 Libav Libav 0.8.4 Libav Libav 0.8.2 Libav Libav 0.8.1 Libav Libav 0.8 Libav Libav 0.7.6 Libav Libav 0.7.5 Libav Libav 0.7.3 Libav Libav 0.7.2 Libav Libav 0.7.1 Libav Libav 0.7 Libav Libav 0.6.5 Libav Libav 0.6.3 Libav Libav 0.6.2 Libav Libav 0.6.1 Libav Libav 0.6 Libav Libav 0.5.8 Libav Libav 0.5.5 Libav Libav 0.5.4 Libav Libav 0.5.3 Libav Libav 0.5.2 Libav Libav 0.5.1 Libav Libav 0.5 |
| Not Vulnerable: |
Libav Libav 12.1 |
Discussion
Libav 'libavformat/nsvdec.c' NULL Pointer Dereference Denial of Service Vulnerability
Libav is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the application, resulting in a denial-of-service condition.
Versions prior to Libav 12.1 are vulnerable.
Libav is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the application, resulting in a denial-of-service condition.
Versions prior to Libav 12.1 are vulnerable.
Exploit / POC
Libav 'libavformat/nsvdec.c' NULL Pointer Dereference Denial of Service Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
Libav 'libavformat/nsvdec.c' NULL Pointer Dereference Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Libav 'libavformat/nsvdec.c' NULL Pointer Dereference Denial of Service Vulnerability
References:
References: