CVE-2016-10190
CRITICALFFmpeg < 2.8.10, 3.0.x < 3.0.5, 3.1.x < 3.1.6, 3.2.x < 3.2.2 - RCE via Negative Chunk Size
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2016-10190. PoCs published by muzalam.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2016-10190, targeting a heap-based buffer overflow in FFmpeg. The exploit uses a crafted HTTP response with chunked encoding to trigger the vulnerability, followed by a ROP chain to achieve remote code execution via a reverse shell.
Description
Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response.
Exploits (1)
This repository contains a functional exploit for CVE-2016-10190, targeting a heap-based buffer overflow in FFmpeg. The exploit uses a crafted HTTP response with chunked encoding to trigger the vulnerability, followed by a ROP chain to achieve remote code execution via a reverse shell.
References (7)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H