FFmpeg CVE-2017-9991 Heap Buffer Overflow Vulnerability
BID:99316
CVE-2017-9991 |Info
FFmpeg CVE-2017-9991 Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 99316 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-9991 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 28 2017 12:00AM |
| Updated: | Jun 28 2017 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
FFmpeg FFmpeg 3.3.2 FFmpeg FFmpeg 3.2.6 FFmpeg FFmpeg 3.2.4 FFmpeg FFmpeg 3.2.2 FFmpeg FFmpeg 3.2 FFmpeg FFmpeg 3.1.7 FFmpeg FFmpeg 3.1.6 FFmpeg FFmpeg 3.1.2 FFmpeg FFmpeg 3.1.1 FFmpeg FFmpeg 3.1 FFmpeg FFmpeg 3.0.7 FFmpeg FFmpeg 3.0.5 FFmpeg FFmpeg 3.0 FFmpeg FFmpeg 2.8.11 FFmpeg FFmpeg 2.8.10 FFmpeg FFmpeg 2.8.5 FFmpeg FFmpeg 2.8.4 FFmpeg FFmpeg 2.8.3 FFmpeg FFmpeg 2.8.2 FFmpeg FFmpeg 2.8.1 FFmpeg FFmpeg 2.8 FFmpeg FFmpeg 2.7.3 FFmpeg FFmpeg 2.7.2 FFmpeg FFmpeg 2.7.1 FFmpeg FFmpeg 2.7 FFmpeg FFmpeg 2.6.5 FFmpeg FFmpeg 2.6.4 FFmpeg FFmpeg 2.6.3 FFmpeg FFmpeg 2.6.2 FFmpeg FFmpeg 2.6.1 FFmpeg FFmpeg 2.6 FFmpeg FFmpeg 2.5.6 FFmpeg FFmpeg 2.5.2 FFmpeg FFmpeg 2.4.8 FFmpeg FFmpeg 2.4.5 FFmpeg FFmpeg 2.4.4 FFmpeg FFmpeg 2.4.3 FFmpeg FFmpeg 2.2.15 FFmpeg FFmpeg 2.2.12 FFmpeg FFmpeg 2.2.4 FFmpeg FFmpeg 2.1.7 FFmpeg FFmpeg 2.1.6 FFmpeg FFmpeg 2.1.5 FFmpeg FFmpeg 2.1.1 FFmpeg FFmpeg 2.0.5 FFmpeg FFmpeg 2.0.1 FFmpeg FFmpeg 1.2.11 FFmpeg FFmpeg 1.2.2 FFmpeg FFmpeg 1.2 FFmpeg FFmpeg 1.1.3 FFmpeg FFmpeg 1.1.2 FFmpeg FFmpeg 1.0.4 FFmpeg FFmpeg 0.11.14 FFmpeg FFmpeg 0.11.13 FFmpeg FFmpeg 0.11.4 FFmpeg FFmpeg 0.11.3 FFmpeg FFmpeg 0.11.2 FFmpeg FFmpeg 0.10.4 FFmpeg FFmpeg 0.10.1 FFmpeg FFmpeg 0.9.1 FFmpeg FFmpeg 0.9 FFmpeg FFmpeg 0.8.11 FFmpeg FFmpeg 0.8.10 FFmpeg FFmpeg 0.8.7 FFmpeg FFmpeg 0.8.6 FFmpeg FFmpeg 0.8.5 FFmpeg FFmpeg 0.8.3 FFmpeg FFmpeg 0.7.11 FFmpeg FFmpeg 0.7.7 FFmpeg FFmpeg 0.7.6 FFmpeg FFmpeg 0.7.4 FFmpeg FFmpeg 0.6.1 FFmpeg FFmpeg 0.4.9 FFmpeg FFmpeg 0.4.8 FFmpeg FFmpeg 0.4.7 FFmpeg FFmpeg 0.4.6 FFmpeg FFmpeg 0.4.4 FFmpeg FFmpeg 3.3 FFmpeg FFmpeg 3.2 FFmpeg FFmpeg 3.1.4 FFmpeg FFmpeg 3.1.3 FFmpeg FFmpeg 3.0.4 FFmpeg FFmpeg 3.0.3 FFmpeg FFmpeg 2.8.9 FFmpeg FFmpeg 2.8.8 FFmpeg FFmpeg 2.8.6 FFmpeg FFmpeg 2.6 FFmpeg FFmpeg 2.5.4 FFmpeg FFmpeg 2.5.1 FFmpeg FFmpeg 2.5.0 FFmpeg FFmpeg 2.5 FFmpeg FFmpeg 2.4.2 FFmpeg FFmpeg 2.4.1 FFmpeg FFmpeg 2.4 FFmpeg FFmpeg 2.3.6 FFmpeg FFmpeg 2.3.5 FFmpeg FFmpeg 2.3.4 FFmpeg FFmpeg 2.3.3 FFmpeg FFmpeg 2.3.2 FFmpeg FFmpeg 2.3 FFmpeg FFmpeg 2.2.9 FFmpeg FFmpeg 2.2.8 FFmpeg FFmpeg 2.2.7 FFmpeg FFmpeg 2.2 FFmpeg FFmpeg 2.1.4 FFmpeg FFmpeg 2.1.3 FFmpeg FFmpeg 2.1.2 FFmpeg FFmpeg 2.1 FFmpeg FFmpeg 2.0.3 FFmpeg FFmpeg 2.0.2 FFmpeg FFmpeg 2.0 FFmpeg FFmpeg 1.2.9 FFmpeg FFmpeg 1.2.8 FFmpeg FFmpeg 1.2.1 FFmpeg FFmpeg 1.1.8 FFmpeg FFmpeg 1.1.7 FFmpeg FFmpeg 1.1.6 FFmpeg FFmpeg 1.1.5 FFmpeg FFmpeg 1.1.4 FFmpeg FFmpeg 1.1.1 FFmpeg FFmpeg 1.1 FFmpeg FFmpeg 1.0.3 FFmpeg FFmpeg 1.0.2 FFmpeg FFmpeg 1.0.1 FFmpeg FFmpeg 1.0 FFmpeg FFmpeg 0.8.8 FFmpeg FFmpeg 0.8.7 FFmpeg FFmpeg 0.8.5.4 FFmpeg FFmpeg 0.8.5.3 FFmpeg FFmpeg 0.8.4 FFmpeg FFmpeg 0.8.2 FFmpeg FFmpeg 0.8.1 FFmpeg FFmpeg 0.8.0 FFmpeg FFmpeg 0.7.9 FFmpeg FFmpeg 0.7.8 FFmpeg FFmpeg 0.7.5 FFmpeg FFmpeg 0.7.3 FFmpeg FFmpeg 0.7.2 FFmpeg FFmpeg 0.7.12 FFmpeg FFmpeg 0.7.1 FFmpeg FFmpeg 0.7-rc1 FFmpeg FFmpeg 0.7 FFmpeg FFmpeg 0.6.3 FFmpeg FFmpeg 0.6.2 FFmpeg FFmpeg 0.6 FFmpeg FFmpeg 0.5.5 FFmpeg FFmpeg 0.5.4.6 FFmpeg FFmpeg 0.5.4.5 FFmpeg FFmpeg 0.5.4 FFmpeg FFmpeg 0.5.3 FFmpeg FFmpeg 0.5.2 FFmpeg FFmpeg 0.5.1 FFmpeg FFmpeg 0.5 FFmpeg FFmpeg 0.4.5 FFmpeg FFmpeg 0.4.3 FFmpeg FFmpeg 0.4.2 FFmpeg FFmpeg 0.4.0 FFmpeg FFmpeg 0.3.4 FFmpeg FFmpeg 0.3.3 FFmpeg FFmpeg 0.3.2 FFmpeg FFmpeg 0.3.1 FFmpeg FFmpeg 0.3 FFmpeg FFmpeg 0.11.5 FFmpeg FFmpeg 0.11.1 FFmpeg FFmpeg 0.11 FFmpeg FFmpeg 0.10.3 FFmpeg FFmpeg 0.10 |
| Not Vulnerable: |
FFmpeg FFmpeg 3.3.1 FFmpeg FFmpeg 3.2.5 FFmpeg FFmpeg 3.1.8 FFmpeg FFmpeg 3.0.8 FFmpeg FFmpeg 2.8.12 |
Discussion
FFmpeg CVE-2017-9991 Heap Buffer Overflow Vulnerability
FFmpeg is prone to a heap-based buffer overflow vulnerability.
Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. Due to the nature of this issue, code execution may be possible but this has not been confirmed.
FFmpeg prior to 2.8.12, 3.0.x prior to 3.0.8, 3.1.x prior to 3.1.8, 3.2.x prior to 3.2.5, and 3.3 are vulnerable.
FFmpeg is prone to a heap-based buffer overflow vulnerability.
Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. Due to the nature of this issue, code execution may be possible but this has not been confirmed.
FFmpeg prior to 2.8.12, 3.0.x prior to 3.0.8, 3.1.x prior to 3.1.8, 3.2.x prior to 3.2.5, and 3.3 are vulnerable.
Exploit / POC
FFmpeg CVE-2017-9991 Heap Buffer Overflow Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
FFmpeg CVE-2017-9991 Heap Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
FFmpeg CVE-2017-9991 Heap Buffer Overflow Vulnerability
References:
References:
- avcodec/xwddec: Check bpp more completely (FFmpeg)
- FFmpeg Homepage (FFmpeg)
- Reproducing OSS-Fuzz issues (Google)
- ffmpeg: Heap-buffer-overflow in xwd_decode_frame (Chromium)