CVE-2016-2326: Integer Overflow
Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS (aka presentation timestamp) value in a .mov file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2326?
CVE-2016-2326 is categorized as a high-severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2016-2326?
To fix CVE-2016-2326, upgrade FFmpeg to version 2.8.5 or later and ensure your Debian or Ubuntu systems are updated with security patches.
What software is affected by CVE-2016-2326?
CVE-2016-2326 affects FFmpeg versions up to and including 2.8.4, Debian 7.0, Debian 8.0, and Ubuntu 12.04.
What is the nature of the vulnerability in CVE-2016-2326?
The vulnerability in CVE-2016-2326 is an integer overflow in the asf_write_packet function that can be exploited via crafted .mov files.
What can attackers achieve by exploiting CVE-2016-2326?
By exploiting CVE-2016-2326, attackers may cause a denial of service or potentially achieve other unspecified impacts.