CVE-2017-5050
HighSummary
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code or destabilize the system, posing a serious security threat to users.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity.
Other vulnerabilities in FFmpeg w Google Chrome
See all- CVE-2017-5047High
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
- CVE-2016-5199High
An off by one error in FFmpeg in Google Chrome prior to version 54.0.2840.98 for Mac, 54.0.2840.99 for Windows, 54.0.2840.100 for Linux, and 55.0.2883.84 for Android may lead to an allocation of zero size. This allows a remote attacker to potentially exploit heap corruption via a crafted video file.
Original NVD description (English source)
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.