CVE-2016-3062: Buffer Overflow
The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via the entries value in a dref box in an MP4 file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3062?
CVE-2016-3062 has a severity rating of high due to its potential to cause memory corruption and allow remote code execution.
How do I fix CVE-2016-3062?
To fix CVE-2016-3062, you should upgrade Libav to version 11.7 or later and FFmpeg to version 0.11 or later.
What software is affected by CVE-2016-3062?
CVE-2016-3062 affects Libav versions prior to 11.7, FFmpeg versions prior to 0.11, Debian 8.0, and openSUSE Leap 42.1.
How can CVE-2016-3062 be exploited?
CVE-2016-3062 can be exploited by remote attackers through malicious MP4 files containing crafted dref box entries.
What are the symptoms of CVE-2016-3062 exploitation?
Exploitation of CVE-2016-3062 may result in denial of service, including application crashes, or arbitrary code execution on the victim's system.