CVE-2016-3062

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via the entries value in a dref box in an MP4 file.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-updates/2016-06/msg00105.htmlThird Party Advisory
http://www.debian.org/security/2016/dsa-3603Third Party Advisory
https://bugzilla.libav.org/show_bug.cgi?id=929Issue Tracking, Vendor Advisory
https://ffmpeg.org/security.html
https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=7e01d48cfd168c3dfc663f03a3b6a98e0ecba328
https://github.com/FFmpeg/FFmpeg/commit/689e59b7ffed34eba6159dcc78e87133862e3746Patch
https://libav.org/releases/libav-11.7.changelogRelease Notes
https://security.gentoo.org/glsa/201705-08
http://lists.opensuse.org/opensuse-updates/2016-06/msg00105.htmlThird Party Advisory
http://www.debian.org/security/2016/dsa-3603Third Party Advisory
https://bugzilla.libav.org/show_bug.cgi?id=929Issue Tracking, Vendor Advisory
https://ffmpeg.org/security.html
https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=7e01d48cfd168c3dfc663f03a3b6a98e0ecba328
https://github.com/FFmpeg/FFmpeg/commit/689e59b7ffed34eba6159dcc78e87133862e3746Patch
https://libav.org/releases/libav-11.7.changelogRelease Notes
https://security.gentoo.org/glsa/201705-08

Timeline

Published: Jun 16, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-30637.5Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authentica CVE-2016-30646.5NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant CVE-2016-30659.1The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows atta CVE-2016-30666.5The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.CVE-2016-30679.8Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.CVE-2016-30688.8Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.CVE-2016-30698.8Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.CVE-2016-30707.8The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with m CVE-2016-30717.5Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform.CVE-2016-30728.8Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow re CVE-2016-30749.8Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or CVE-2016-30757.5Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows conte