CVE-2017-5047
HighSummary
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code, potentially leading to full system compromise. This poses a significant threat to data security and system integrity.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability. Additionally, monitor and restrict the opening of video files from untrusted sources.
Other vulnerabilities in FFmpeg w Google Chrome
See all- CVE-2017-5050High
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
- CVE-2016-5199High
An off by one error in FFmpeg in Google Chrome prior to version 54.0.2840.98 for Mac, 54.0.2840.99 for Windows, 54.0.2840.100 for Linux, and 55.0.2883.84 for Android may lead to an allocation of zero size. This allows a remote attacker to potentially exploit heap corruption via a crafted video file.
Original NVD description (English source)
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.