CVE-2008-3162: Buffer Overflow

Published Jul 14, 2008

Updated

Stack-based buffer overflow in the strreadpacket function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted STR file that interleaves audio and video sectors.

Affected Software

14 affected components

FFmpeg FFmpeg=0.4.5

FFmpeg FFmpeg=0.3.2

FFmpeg FFmpeg=0.4.7

FFmpeg FFmpeg=0.3.3

FFmpeg FFmpeg=0.3

FFmpeg FFmpeg=0.4.2

FFmpeg FFmpeg=0.3.1

FFmpeg FFmpeg=0.4.4

FFmpeg FFmpeg=0.4.6

FFmpeg FFmpeg=0.3.4

FFmpeg FFmpeg=0.4.0

FFmpeg FFmpeg=0.4.8

FFmpeg FFmpeg=0.4.3

FFmpeg FFmpeg=0.4.9

Event History

Jul 14, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3162?

CVE-2008-3162 has a high severity due to its potential for causing application crashes and executing arbitrary code.

How do I fix CVE-2008-3162?

To fix CVE-2008-3162, upgrade FFmpeg to a version later than r13993 that addresses this buffer overflow vulnerability.

Which versions of FFmpeg are affected by CVE-2008-3162?

CVE-2008-3162 affects specific versions of FFmpeg including 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.4.0, 0.4.2, 0.4.3, 0.4.4, 0.4.5, 0.4.6, 0.4.7, 0.4.8, and 0.4.9.

What kind of attack can CVE-2008-3162 facilitate?

CVE-2008-3162 can facilitate a denial of service attack or allow remote attackers to execute arbitrary code via crafted STR files.

When was CVE-2008-3162 discovered?

CVE-2008-3162 was discovered in 2008, highlighting vulnerabilities in earlier versions of FFmpeg.