CVE-2017-17128

EUVD-2017-8294 · Published Dec 4, 2017

The h264_slice_init function in libavcodec/h264_slice.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted file.

Technologies

Libav Libav

Weaknesses

CWE-119

CVSS scores

v3.06.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
v2.04.3AV:N/AC:M/Au:N/C:N/I:N/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://bugzilla.libav.org/show_bug.cgi?id=1104

Potentially impacted assets

See if this affects your attack surface