CVE-2016-5199 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Arbitrary code execution |
| Description | FFMPEG MP4 decoder contains an off-by-one error resulting in an allocation of size 0, followed by corrupting an arbitrary number of pointers out of bounds on the heap, where each is pointing to controllable or uninitialized data. A remote attacker can potentially use this flaw to exploit heap corruption via a crafted video file. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-162 | qt5-webengine | 5.7.1-1 | 5.8.0-1 | High | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 02 Feb 2017 | ASA-201702-2 | AVG-162 | qt5-webengine | High | multiple issues |
| References |
|---|
https://chromereleases.googleblog.com/2016/11/stable-channel-update-for-desktop_9.html https://bugs.chromium.org/p/chromium/issues/detail?id=643948 |