Lucene search
HistoryJul 18, 2008 - 4:41 p.m.
CVE-2008-3230
cve-2008-3230
denial of service
ffmpeg
gif
gstreamer
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.3%
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.
Affected configurations
Node
ffmpeglavf_demuxer
| CPE | Name | Operator | Version |
|---|---|---|---|
| ffmpeg:lavf_demuxer | ffmpeg lavf demuxer | eq | * |
References
Related
prion
prion
Spoofing
2008-07-18 16:41:00
cvelist
cvelist
CVE-2008-3230
2008-07-18 16:00:00
debiancve
debiancve
CVE-2008-3230
2008-07-18 16:41:00
ubuntucve
ubuntucve
CVE-2008-3230
2008-07-18 00:00:00
nvd
nvd
CVE-2008-3230
2008-07-18 16:41:00
openvas
openvas
Mandriva Security Advisory MDVSA-2009:297-1 (ffmpeg)
2009-12-10 00:00:00
Mandriva Security Advisory MDVSA-2009:297 (ffmpeg)
2009-11-17 00:00:00
Mandriva Security Advisory MDVSA-2009:297 (ffmpeg)
2009-11-17 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:297-1)
2009-11-16 00:00:00
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.3%
Related for CVE-2008-3230