CVE-2016-5199

🗓️ 19 Jan 2017 05:00:59Reported by ChromeType

cve🔗 web.nvd.nist.gov👁 93 Views🌐 4 Media mentions

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrom

Reporter	Title	Published	Views	Family All 55
Cvelist	CVE-2016-5199	19 Jan 201705:43	–	cvelist
Check Point Advisories	FFmpeg mov_read_keys Integer Overflow (CVE-2016-5199)	1 Dec 201600:00	–	checkpoint_advisories
Prion	Design/Logic Flaw	19 Jan 201705:59	–	prion
RedhatCVE	CVE-2016-5199	10 Nov 201609:17	–	redhatcve
AlpineLinux	CVE-2016-5199	19 Jan 201705:59	–	alpinelinux
OSV	CVE-2016-5199	19 Jan 201705:59	–	osv
OSV	Red Hat Security Advisory: chromium-browser security update	13 Sep 202411:06	–	osv
OSV	chromium-browser - security update	11 Dec 201600:00	–	osv
OSV	chromedriver-55.0.2883.75-3.1 on GA media	15 Jun 202400:00	–	osv
OSV	ungoogled-chromium-113.0.5672.92-1.1 on GA media	15 Jun 202400:00	–	osv

Nvd

Node

google chromeRange≤54.0.2840.87

[
  {
    "product": "Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android"
      }
    ]
  }
]

Source	Link
rhn	www.rhn.redhat.com/errata/RHSA-2016-2718.html
securityfocus	www.securityfocus.com/bid/94196
securitytracker	www.securitytracker.com/id/1037273
chromereleases	www.chromereleases.googleblog.com/2016/11/stable-channel-update-for-desktop_9.html
crbug	www.crbug.com/643948
security	www.security.gentoo.org/glsa/201611-16

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Jan 2017 05:59Current

8.5High risk

Vulners AI Score8.5

CVSS26.8

CVSS38.8

EPSS0.013

CWE-119