NetSight
IP …
critical9.3Public exploit code

CVE-2008-3162

Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial of servic…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted STR file that interleaves audio and video sectors.

Affected products

VendorProductAffected versions
FfmpegFfmpeg
Versions 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.4.0

Weakness classification

CWE-119

References