CVE-2017-9608

MEDIUM

FFmpeg < 3.2.6 - Denial of Service via Crafted MOV File

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-9608. PoCs published by LaCinquette.

AI-analyzed exploit summary This repository provides a detailed analysis and proof-of-concept for CVE-2017-9608, a null pointer dereference vulnerability in FFmpeg. It includes a Docker setup to build and test the vulnerable version of FFmpeg, along with an explanation of the vulnerability and its exploitation.

Description

The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted mov file.

Exploits (1)

nomisec WRITEUP

by LaCinquette · poc

https://github.com/LaCinquette/practice-22-23

View Code ZIP pw:eip

This repository provides a detailed analysis and proof-of-concept for CVE-2017-9608, a null pointer dereference vulnerability in FFmpeg. It includes a Docker setup to build and test the vulnerable version of FFmpeg, along with an explanation of the vulnerability and its exploitation.

Classification

Writeup 90%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: FFmpeg (versions prior to the fix commit)

No auth needed

Prerequisites: Docker · FFmpeg source code with the vulnerability

MITRE ATT&CK