FFmpeg libavformat - 'psxstr.c' STR Data Heap Buffer Overflow

Author: astrange
type: dos
platform: linux
port: 
date_added: 2008-07-09 
date_updated: 2014-03-03 
verified: 1 
codes: CVE-2008-3162;OSVDB-46842 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/30154/info

The 'libavformat' library from FFmpeg is prone to a remote heap-based buffer-overflow vulnerability because of insufficient boundary checks when parsing STR data.

Remote attackers can exploit this issue by enticing victims into opening maliciously crafted STR files with an application that uses the affected library.

Successful exploits may allow attackers to execute arbitrary code within the context of an affected application. Failed exploit attempts will likely result in a denial of service.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32019.iki