Lucene search

[email protected]CVE-2011-3936

HistoryAug 20, 2012 - 6:55 p.m.

CVE-2011-3936

2012-08-2018:55:01

CWE-20

[email protected]

web.nvd.nist.gov

cve-2011-3936

ffmpeg

libav

version 0.7.x

version 0.8.x

denial of service

out-of-bounds read

application crash

dv file

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

8.6 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.8%

JSON

The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file.

Affected configurations

NVD

Node

ffmpegffmpegMatch0.7

ffmpegffmpegMatch0.7.1

ffmpegffmpegMatch0.7.2

ffmpegffmpegMatch0.7.3

ffmpegffmpegMatch0.7.6

ffmpegffmpegMatch0.7.7

ffmpegffmpegMatch0.7.8

ffmpegffmpegMatch0.7.9

ffmpegffmpegMatch0.7.11

ffmpegffmpegMatch0.7.12

ffmpegffmpegMatch0.8.0

ffmpegffmpegMatch0.8.1

ffmpegffmpegMatch0.8.2

ffmpegffmpegMatch0.8.5

ffmpegffmpegMatch0.8.6

ffmpegffmpegMatch0.8.7

ffmpegffmpegMatch0.8.8

ffmpegffmpegMatch0.8.10

Node

libavlibavMatch0.5

libavlibavMatch0.5.1

libavlibavMatch0.5.2

libavlibavMatch0.5.3

libavlibavMatch0.5.4

libavlibavMatch0.5.5

libavlibavMatch0.5.6

libavlibavMatch0.5.7

libavlibavMatch0.6

libavlibavMatch0.6.1

libavlibavMatch0.6.2

libavlibavMatch0.6.3

libavlibavMatch0.6.4

libavlibavMatch0.6.5

libavlibavMatch0.7

libavlibavMatch0.7beta1

libavlibavMatch0.7beta2

libavlibavMatch0.7.1

libavlibavMatch0.7.2

libavlibavMatch0.7.3

libavlibavMatch0.7.4

libavlibavMatch0.8

libavlibavMatch0.8beta2

CPENameOperatorVersion
ffmpeg:ffmpegffmpegeq0.7
ffmpeg:ffmpegffmpegeq0.7.1
ffmpeg:ffmpegffmpegeq0.7.2
ffmpeg:ffmpegffmpegeq0.7.3
ffmpeg:ffmpegffmpegeq0.7.6
ffmpeg:ffmpegffmpegeq0.7.7
ffmpeg:ffmpegffmpegeq0.7.8
ffmpeg:ffmpegffmpegeq0.7.9
ffmpeg:ffmpegffmpegeq0.7.11
ffmpeg:ffmpegffmpegeq0.7.12

CPE	Name	Operator	Version
ffmpeg:ffmpeg	ffmpeg	eq	0.7
ffmpeg:ffmpeg	ffmpeg	eq	0.7.1
ffmpeg:ffmpeg	ffmpeg	eq	0.7.2
ffmpeg:ffmpeg	ffmpeg	eq	0.7.3
ffmpeg:ffmpeg	ffmpeg	eq	0.7.6
ffmpeg:ffmpeg	ffmpeg	eq	0.7.7
ffmpeg:ffmpeg	ffmpeg	eq	0.7.8
ffmpeg:ffmpeg	ffmpeg	eq	0.7.9
ffmpeg:ffmpeg	ffmpeg	eq	0.7.11
ffmpeg:ffmpeg	ffmpeg	eq	0.7.12