CVE-2017-5049
HighSummary
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allows a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Risk Assessment
This vulnerability may lead to unauthorized memory access, potentially resulting in data leakage or remote code execution by an attacker.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity related to video file playback.
Other vulnerabilities in FFmpeg, Google Chrome
See all- CVE-2017-5048High
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allows a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
- CVE-2014-7933High
Use-after-free vulnerability in the matroska_read_seek function in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.
Original NVD description (English source)
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.