CVE-2017-7208
HighSummary
The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file.
Risk Assessment
Attackers can exploit this vulnerability to disrupt system operations or steal confidential data, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update libav to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity related to video file playback.
Other vulnerabilities in libavcodec in libav 9.21
Original NVD description (English source)
The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file.