CVE-2017-7208: High severity Libav Libav vulnerability
Published Mar 21, 2017
·Updated
The decoderesidual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file.
Affected Software
1 affected component
Libav Libav=9.21
Event History
Mar 21, 2017
CVE Published
via MITRE·06:21 AM
Data Sourced
via MITRE·06:21 AM
Description
Data Sourced
via NVD·06:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-7208?
CVE-2017-7208 has a severity rating of medium due to the potential for denial of service and information disclosure.
2
How do I fix CVE-2017-7208?
To fix CVE-2017-7208, upgrade to a patched version of Libav that addresses this vulnerability.
3
What types of attacks can exploit CVE-2017-7208?
CVE-2017-7208 can be exploited via crafted h264 video files to cause a buffer over-read or leak sensitive information.
4
Which software versions are affected by CVE-2017-7208?
CVE-2017-7208 specifically affects Libav version 9.21.
5
What is the main function involved in CVE-2017-7208?
The main function involved in CVE-2017-7208 is the decode_residual function in libavcodec.