SecuritySpace - CVE-2017-14057

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-14057

Description: In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops.

Test IDs: 1.3.6.1.4.1.25623.1.0.891630

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-14057
BugTraq ID: 100630
http://www.securityfocus.com/bid/100630
Debian Security Information: DSA-3996 (Google Search)
http://www.debian.org/security/2017/dsa-3996
https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html

CVE ID:	CVE-2017-14057
Description:	In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops.
Test IDs:	1.3.6.1.4.1.25623.1.0.891630
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-14057 BugTraq ID: 100630 http://www.securityfocus.com/bid/100630 Debian Security Information: DSA-3996 (Google Search) http://www.debian.org/security/2017/dsa-3996 https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html