Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-9996

The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
Products affected by CVE-2017-9996
  • Ffmpeg » Ffmpeg » Version: 2.8
    cpe:2.3:a:ffmpeg:ffmpeg:2.8
  • Ffmpeg » Ffmpeg » Version: 2.8.1
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.1
  • Ffmpeg » Ffmpeg » Version: 2.8.10
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.10
  • Ffmpeg » Ffmpeg » Version: 2.8.11
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.11
  • Ffmpeg » Ffmpeg » Version: 2.8.2
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.2
  • Ffmpeg » Ffmpeg » Version: 2.8.3
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.3
  • Ffmpeg » Ffmpeg » Version: 2.8.4
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.4
  • Ffmpeg » Ffmpeg » Version: 2.8.5
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.5
  • Ffmpeg » Ffmpeg » Version: 2.8.6
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.6
  • Ffmpeg » Ffmpeg » Version: 2.8.7
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.7
  • Ffmpeg » Ffmpeg » Version: 2.8.8
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.8
  • Ffmpeg » Ffmpeg » Version: 2.8.9
    cpe:2.3:a:ffmpeg:ffmpeg:2.8.9
  • Ffmpeg » Ffmpeg » Version: 3.0
    cpe:2.3:a:ffmpeg:ffmpeg:3.0
  • Ffmpeg » Ffmpeg » Version: 3.0.1
    cpe:2.3:a:ffmpeg:ffmpeg:3.0.1
  • Ffmpeg » Ffmpeg » Version: 3.0.2
    cpe:2.3:a:ffmpeg:ffmpeg:3.0.2
  • Ffmpeg » Ffmpeg » Version: 3.0.3
    cpe:2.3:a:ffmpeg:ffmpeg:3.0.3
  • Ffmpeg » Ffmpeg » Version: 3.0.4
    cpe:2.3:a:ffmpeg:ffmpeg:3.0.4
  • Ffmpeg » Ffmpeg » Version: 3.0.5
    cpe:2.3:a:ffmpeg:ffmpeg:3.0.5
  • Ffmpeg » Ffmpeg » Version: 3.0.6
    cpe:2.3:a:ffmpeg:ffmpeg:3.0.6
  • Ffmpeg » Ffmpeg » Version: 3.0.7
    cpe:2.3:a:ffmpeg:ffmpeg:3.0.7
  • Ffmpeg » Ffmpeg » Version: 3.1
    cpe:2.3:a:ffmpeg:ffmpeg:3.1
  • Ffmpeg » Ffmpeg » Version: 3.1.1
    cpe:2.3:a:ffmpeg:ffmpeg:3.1.1
  • Ffmpeg » Ffmpeg » Version: 3.1.2
    cpe:2.3:a:ffmpeg:ffmpeg:3.1.2
  • Ffmpeg » Ffmpeg » Version: 3.1.3
    cpe:2.3:a:ffmpeg:ffmpeg:3.1.3
  • Ffmpeg » Ffmpeg » Version: 3.1.4
    cpe:2.3:a:ffmpeg:ffmpeg:3.1.4
  • Ffmpeg » Ffmpeg » Version: 3.1.5
    cpe:2.3:a:ffmpeg:ffmpeg:3.1.5
  • Ffmpeg » Ffmpeg » Version: 3.1.6
    cpe:2.3:a:ffmpeg:ffmpeg:3.1.6
  • Ffmpeg » Ffmpeg » Version: 3.1.7
    cpe:2.3:a:ffmpeg:ffmpeg:3.1.7
  • Ffmpeg » Ffmpeg » Version: 3.2
    cpe:2.3:a:ffmpeg:ffmpeg:3.2
  • Ffmpeg » Ffmpeg » Version: 3.2.1
    cpe:2.3:a:ffmpeg:ffmpeg:3.2.1
  • Ffmpeg » Ffmpeg » Version: 3.2.2
    cpe:2.3:a:ffmpeg:ffmpeg:3.2.2
  • Ffmpeg » Ffmpeg » Version: 3.2.3
    cpe:2.3:a:ffmpeg:ffmpeg:3.2.3
  • Ffmpeg » Ffmpeg » Version: 3.2.4
    cpe:2.3:a:ffmpeg:ffmpeg:3.2.4
  • Ffmpeg » Ffmpeg » Version: 3.3
    cpe:2.3:a:ffmpeg:ffmpeg:3.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved