CVE-2017-5051
HighSummary
An integer overflow in FFmpeg in Google Chrome prior to version 57.0.2987.98 for Mac, Windows, and Linux and prior to version 57.0.2987.108 for Android allows a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious code, potentially leading to full control over the victim's system.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor systems for suspicious video files.
Other vulnerabilities in FFmpeg in Google Chrome
Original NVD description (English source)
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS