CVE-2016-7499: Divide by Zero
First published: Wed Feb 15 2017(Updated: )
The sbr_make_f_master function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| libavutil | =11.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2016/09/21/9
- http://www.securityfocus.com/bid/93102
- https://blogs.gentoo.org/ago/2016/09/21/libav-divide-by-zero-in-sbr_make_f_master-aacsbr-c/
- https://git.libav.org/?p=libav.git;a=blobdiff;f=libavcodec/aacsbr.c;h=7d156e525b40b197c38db17acf16730845b91e56;hp=dbfb1677813ce6c531e4362d0be7ccf9fdfdd28e;hb=a50a5ff29ec5a8243499769e2bb9b5509ce9fd52;hpb=f55e3ff5891daf3d538b4d9176371960200d68fa
- https://git.libav.org/?p=libav.git%3Ba=blobdiff%3Bf=libavcodec/aacsbr.c%3Bh=7d156e525b40b197c38db17acf16730845b91e56%3Bhp=dbfb1677813ce6c531e4362d0be7ccf9fdfdd28e%3Bhb=a50a5ff29ec5a8243499769e2bb9b5509ce9fd52%3Bhpb=f55e3ff5891daf3d538b4d9176371960200d68fa
Frequently Asked Questions
What is the severity of CVE-2016-7499?
CVE-2016-7499 has been classified as a denial of service vulnerability, which can lead to application crashes.
How do I fix CVE-2016-7499?
To fix CVE-2016-7499, upgrade to Libav version 11.8 or later, which addresses the vulnerability.
What type of attack does CVE-2016-7499 involve?
CVE-2016-7499 involves a remote denial of service attack through a specially crafted MP3 file.
Which version of Libav is affected by CVE-2016-7499?
Libav version 11.7 is specifically affected by CVE-2016-7499.
Can CVE-2016-7499 be exploited without user interaction?
Yes, CVE-2016-7499 can be exploited remotely without user interaction by delivering a malicious MP3 file.
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/libav
- canonical/libavutil
- version/libavutil/11.7