CVE-2016-6881
MEDIUMFfmpeg < 3.1.2 - Resource Management Error
Title source: ruleDescription
The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file.
Scores
CVSS v3
5.5
EPSS
0.0043
EPSS Percentile
62.6%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-399
Status
published
Affected Products (2)
ffmpeg/ffmpeg
< 3.1.2
n/a/n/a
Timeline
Published
Dec 23, 2016
Tracked Since
Feb 18, 2026